Login Request a demo
AW
Vendor
AWS
91 products with CVEs on record
129
CVEs
0
On KEV
33
New 30D
Products
LO
loom
AWS
10.0
3 CVEs0 on KEV3 new
BE
bedrock-agentcore-starter-toolkit
aws
9.0
2 CVEs0 on KEV2 new
MU
multi-model-server
AWS
9.8
2 CVEs0 on KEV2 new
AN
Amazon Neptune Engine
AWS
9.9
1 CVEs0 on KEV1 new
SA
sagemaker-distribution
AWS
9.0
1 CVEs0 on KEV1 new
AA
Amazon Athena
AWS
7.7
2 CVEs0 on KEV2 new
AS
Amazon SageMaker Python SDK
AWS
8.1
3 CVEs0 on KEV1 new
AW
aws-api-mcp-server
AWS
7.8
2 CVEs0 on KEV1 new
AW
aws-efs-csi-driver
aws
8.7
2 CVEs0 on KEV1 new
QN
qnabot-on-aws
aws
7.2
2 CVEs0 on KEV1 new
SA
sagemaker-python-sdk
AWS
7.2
2 CVEs0 on KEV1 new
AW
aws-amplify/data-construct
AWS
6.5
1 CVEs0 on KEV1 new
AW
aws-amplify/graphql-api-construct
AWS
6.5
1 CVEs0 on KEV1 new
AW
aws-amplify/graphql-index-transformer
AWS
6.5
1 CVEs0 on KEV1 new
AW
aws-c-mqtt
AWS
7.5
1 CVEs0 on KEV1 new
AW
aws-cdk/aws-redshift-alpha
AWS
7.3
1 CVEs0 on KEV1 new
AW
aws-cdk-lib
AWS
5.5
1 CVEs0 on KEV1 new
AM
AWS MCP Server
AWS
6.4
1 CVEs0 on KEV1 new
AW
aws-sam-cli
AWS
7.8
1 CVEs0 on KEV1 new
AW
aws-toolkit-vscode
aws
5.5
1 CVEs0 on KEV1 new
AW
aws-tools-for-powershell
AWS
5.9
1 CVEs0 on KEV1 new
CI
CICD-toolchain-for-serverless-applications
AWS
8.8
1 CVEs0 on KEV1 new
DA
databases-on-aws
aws
7.8
1 CVEs0 on KEV1 new
GL
gluonts
AWS
7.8
1 CVEs0 on KEV1 new
PO
powertools-lambda-python
AWS
5.3
1 CVEs0 on KEV1 new
SE
security-agent-mcp-server
AWS
8.2
1 CVEs0 on KEV1 new
ST
strands-agents
AWS
8.1
1 CVEs0 on KEV1 new
ST
strands-agents/sdk
AWS
8.1
1 CVEs0 on KEV1 new
FR
FreeRTOS-Plus-TCP
AWS
8.1
5 CVEs0 on KEV0 new
KI
Kiro IDE
AWS
8.8
4 CVEs0 on KEV0 new
AA
AWS Advanced JDBC Wrapper
AWS
8.8
3 CVEs0 on KEV0 new
AO
AWS Ops Wheel
AWS
9.8
3 CVEs0 on KEV0 new
OP
Opensearch
AWS
8.8
3 CVEs0 on KEV0 new
RA
Research and Engineering Studio (RES)
AWS
8.8
3 CVEs0 on KEV0 new
ST
strands-agents-tools
AWS
8.8
3 CVEs0 on KEV0 new
TO
tough
AWS
6.5
3 CVEs0 on KEV0 new
TU
tuftool
AWS
6.5
3 CVEs0 on KEV0 new
AO
Amazon OpenSearch Service
AWS
8.8
2 CVEs0 on KEV0 new
AW
aws-cli
AWS
6.8
2 CVEs0 on KEV0 new
AW
aws-sdk-cpp
AWS
5.9
2 CVEs0 on KEV0 new
BE
bedrock-agentcore
AWS
7.3
2 CVEs0 on KEV0 new
PR
projen
AWS
7.8
2 CVEs0 on KEV0 new
S2
s2n-quic
AWS
7.5
2 CVEs0 on KEV0 new
AC
AgentCore CLI
AWS
9.0
1 CVEs0 on KEV0 new
AB
Amazon Bedrock AgentCore harness
AWS
8.1
1 CVEs0 on KEV0 new
AB
Amazon Braket Python SDK
AWS
7.1
1 CVEs0 on KEV0 new
AC
Amazon CloudFront
AWS
9.8
1 CVEs0 on KEV0 new
AM
@amazon-codecatalyst/blueprints.blueprint
AWS
8.0
1 CVEs0 on KEV0 new
AE
Amazon ECS Agent
AWS
7.2
1 CVEs0 on KEV0 new
AM
amazon-mq-mcp-server
AWS
6.5
1 CVEs0 on KEV0 new
AR
Amazon Redshift connector for Python
AWS
9.8
1 CVEs0 on KEV0 new
AS
Amazon SSM Agent
AWS
9.9
1 CVEs0 on KEV0 new
AM
amazon-vpc-cni-k8s
AWS
8.7
1 CVEs0 on KEV0 new
AC
Amplify Codegen UI
AWS
8.8
1 CVEs0 on KEV0 new
AF
Athena Federated Query Clickhouse Connector deployment template
AWS
6.5
1 CVEs0 on KEV0 new
AF
Athena Federated Query Neptune Connector
AWS
9.9
1 CVEs0 on KEV0 new
AA
AWS Advanced Go Wrapper
AWS
8.0
1 CVEs0 on KEV0 new
AA
AWS Application Load Balancer
AWS
9.8
1 CVEs0 on KEV0 new
AW
aws-athena-query-federation
AWS
6.8
1 CVEs0 on KEV0 new
AW
aws-c-event-stream
AWS
7.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115413
New
AW
aws-api-mcp-server
AWS
7.8–Oct 27AWS API MCP Server OAuth Token Audience Validation Bypass
CVE-2026-115418
New
AW
aws-cdk/aws-redshift-alpha
AWS
7.3
0%
Oct 26SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha
CVE-2026-115845
New
AM
AWS MCP Server
AWS
6.4
0%
Oct 23Incomplete validation in the run_script Python sandbox in AWS MCP Server
CVE-2026-115813
New
MU
multi-model-server
AWS
5.8
0%
Oct 23Server-side request forgery in the model download path in Amazon Web Services Multi Model Server
CVE-2026-115812
New
MU
multi-model-server
AWS
9.8
1%
Oct 23Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server
CVE-2026-115417
New
AW
aws-c-mqtt
AWS
7.5
0%
Oct 22Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt
CVE-2026-115419
New
ST
strands-agents/sdk
AWS
8.1
0%
Oct 22Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
CVE-2026-115414
New
AW
aws-sam-cli
AWS
7.8
1%
Oct 22OS command injection in the Terraform hook in AWS SAM CLI
CVE-2026-115416
New
AA
Amazon Athena
AWS
7.7
0%
Oct 22Incorrect authorization checks in Amazon Athena engine version 3 query processing
CVE-2026-112408
New
AS
Amazon SageMaker Python SDK
AWS
8.1
1%
Oct 21Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()
CVE-2026-112407
CI
CICD-toolchain-for-serverless-applications
AWS
8.8
0%
Oct 20Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications
CVE-2026-110812
AN
Amazon Neptune Engine
AWS
9.9
0%
Oct 15Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune
CVE-2026-110248
SP
SageMaker Python SDK
AWS
5.3
1%
Oct 14Insertion of sensitive information into log files in Amazon SageMaker Python SDK git_utils[.]py
CVE-2026-108096
AW
aws-amplify/graphql-api-construct
AWS
6.5
0%
Oct 9Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category
CVE-2026-107783
AW
aws-tools-for-powershell
AWS
5.9
0%
Oct 9Insertion of sensitive information into log file in AWS Tools for PowerShell
CVE-2026-107608
AW
aws-cdk-lib
AWS
5.5
0%
Oct 8Improper link resolution in asset bundling output handling in aws-cdk-lib
CVE-2026-107322
DA
databases-on-aws
aws
7.8
0%
Oct 8OS command injection in Amazon Agent Plugins for AWS databases-on-aws
CVE-2026-107332
AW
aws-toolkit-vscode
aws
5.5
0%
Oct 8Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Code
CVE-2026-107352
AA
Amazon Athena
AWS
7.7
0%
Oct 7Missing authorization checks in Amazon Athena engine version 3 request handling
CVE-2026-106032
BE
bedrock-agentcore-starter-toolkit
aws
5.7
0%
Oct 6Server-side request forgery and local file read via unrestricted external OpenAPI reference resolution in Bedrock AgentCore Starter Toolkit agent import
CVE-2026-105812
BE
bedrock-agentcore-starter-toolkit
aws
9.0
0%
Oct 6Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import
CVE-2026-105811
QN
qnabot-on-aws
aws
6.5
0%
Oct 6Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS
CVE-2026-104019
SA
sagemaker-distribution
AWS
9.0
1%
Oct 2OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio
CVE-2026-103958
LO
loom
AWS
7.6
0%
Oct 2Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS
CVE-2026-103957
LO
loom
AWS
6.2
0%
Oct 2Server-side request forgery in the OAuth2 discovery handling in Loom for AWS
CVE-2026-103956
LO
loom
AWS
10.0
2%
Oct 2Missing authentication for critical function in Loom for AWS
CVE-2026-104002
PO
powertools-lambda-python
AWS
5.3
0%
Oct 1Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
CVE-2026-97662
SE
security-agent-mcp-server
AWS
8.2
0%
Oct 1Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace
CVE-2026-103505
AW
aws-efs-csi-driver
AWS
6.5
0%
Oct 1AWS EFS CSI Driver Mount Option Injection via mounttargetipmap
CVE-2026-100308
GL
gluonts
AWS
7.8
0%
Sep 29GluonTS arbitrary command execution during model deserialization
CVE-2026-96883
PG
pgcollection
AWS
8.8
1%
Sep 24Type confusion in AWS pgcollection allows remote code execution
CVE-2026-94450
S2
s2n-quic
AWS
7.5
2%
Sep 22Potential denial of service when configured to send Retry packets in s2n-quic
CVE-2026-92943
AW
AWSIoTPythonSDK
AWS
8.1
0%
Sep 17Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python
CVE-2026-86831
AM
amazon-vpc-cni-k8s
AWS
8.7
1%
Sep 16Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS
CVE-2026-86830
IA
iam-identity-center-team
AWS
7.2
1%
Sep 14Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
CVE-2026-89332
KI
Kiro IDE
AWS
5.5
0%
Sep 11Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration
CVE-2026-89090
AS
AWS SDK for Go v2
AWS
5.9
0%
Sep 11Denial of service in the event stream header decoder in AWS SDK for Go v2
CVE-2026-18061
AA
AWS Advanced JDBC Wrapper
AWS
5.9
0%
Sep 11Improper Restriction of XML External Entity References in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin
CVE-2026-89066
PR
projen
AWS
7.8
0%
Sep 11OS command injection in the task synthesis component in projen
CVE-2026-89065
PR
projen
AWS
7.1
0%
Sep 11Relative path traversal in the generated file manifest cleanup component in projen
CVE-2026-89049
AS
Amazon SSM Agent
AWS
9.9
1%
Sep 10Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent
CVE-2026-87913
AS
AWS Security Agent MCP server
AWS
5.9
0%
Sep 10Missing S3 bucket ownership verification in the AWS Security Agent MCP server
CVE-2026-87912
AS
AWS Security Agent plugin
AWS
5.9
0%
Sep 10Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops
CVE-2026-87911
AL
AWS Labs postgres MCP Server
AWS
9.6
2%
Sep 9Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server
CVE-2026-85788
AL
AWS Labs MySQL MCP Server
AWS
5.5
0%
Sep 9Incomplete list of disallowed inputs in awslabs mysql-mcp-server
CVE-2026-85781
AW
aws-efs-csi-driver
aws
8.7
0%
Sep 4Unverified access point ownership in Amazon EFS CSI Driver
CVE-2026-85028
AW
aws-fpga
AWS
7.8
0%
Sep 3Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit
CVE-2026-85012
AM
@amazon-codecatalyst/blueprints.blueprint
AWS
8.0
2%
Sep 3OS command injection in the Amazon CodeCatalyst blueprints SDK
CVE-2026-83551
SA
sagemaker-python-sdk
AWS
7.2
1%
Sep 1Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline path
CVE-2026-81838
DI
diagram-as-code
aws
7.1
0%
Aug 27Zip Slip Arbitrary File Write in AWS diagram-as-code (awsdac)
CVE-2026-77810
AF
Athena Federated Query Neptune Connector
AWS
9.9
1%
Aug 21Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector
CVE-2026-18420
AO
Amazon OpenSearch Service
AWS
8.8
1%
Aug 20RCE via Prototype Pollution in OpenSearch Dashboards
CVE-2026-75910
AF
Athena Federated Query Clickhouse Connector deployment template
AWS
6.5
1%
Aug 20Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template
CVE-2026-75897
AO
Amazon OpenSearch Service
AWS
7.5
1%
Aug 18Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards
CVE-2026-18428
OP
Opensearch
AWS
8.8
1%
Aug 13SQL Query Validation Bypass in OpenSearch Direct Query
CVE-2026-19643
AW
aws-sdk-cpp
AWS
5.3
1%
Aug 12Out-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platforms
CVE-2026-19642
AW
aws-sdk-cpp
AWS
5.9
1%
Aug 12Out-of-bounds write in the Base64 decoder in Amazon aws-sdk-cpp
CVE-2026-18952
OP
Opensearch
AWS
8.1
1%
Aug 12Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin
CVE-2026-19311
OP
OpenSearch
AWS
8.1
1%
Aug 12Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin
CVE-2026-19111
ST
strands-agents-tools
AWS
8.1
1%
Aug 6Insecure direct object reference in Strands Agents Tools memory tool namespace isolation