CVE Browser

Uncontrolled recursion in the Ion reader in Amazon Ion Python

Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces

Missing Authorization in sfExecuteAWSService Lambda Dispatcher in Amazon Connect Salesforce Lambda

ca-certificates: ca-certificates: Failure to remove TrustCor root certificates

Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration

Improper Restriction of XML External Entity References in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin

Integer overflow in tensor buffer validation in Deep Java Library

An incomplete list of disallowed inputs in the SQL validation component of Amazon awslabs postgres-mcp-server

Incomplete fix for CVE-2026-75936 memory-amplification denial of service in Amazon ion-java

OS command injection in Amazon log4j-cve-2021-44228-hotpatch

Code injection in the CDK generator in Amazon awslabs.dynamodb-mcp-server

Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6

Unrestricted Java Deserialization in OpenSearch SQL Plugin Cursor Pagination

Path traversal in the aws:downloadContent plugin in amazon-ssm-agent

Zip Slip Arbitrary File Write in AWS diagram-as-code (awsdac)

Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools

Missing type validation in xQueueAddToSet in FreeRTOS-Kernel

Missing size validation in SecureContext_AllocateContext in FreeRTOS-Kernel

Missing privilege check in SecureContext_FreeContext in FreeRTOS-Kernel

Improper input validation in FreeRTOS-Kernel timer command handling

Out-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platforms

Out-of-bounds write in the Base64 decoder in Amazon aws-sdk-cpp

Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server

Improper limitation of a pathname to a restricted directory in aws-transform-mcp-server

Executable Resolution from Untrusted Project Directory in Kiro CLI on Windows