software.amazon.awssdk vulnerabilities

Products

• software.amazon.awssdk/cloudfront 1

Latest software.amazon.awssdk CVEs

Newest publication first

1. GHSA-443w-3rq3-5m5h AWS SDK for Java 2.0: Improper Handling of Special Characters in CloudFront Signing Utilities

   Published 2026-03-27

   Unknown

   Summary This notification is related to the CloudFront signing utilities in the AWS SDK for Java v2, which are used to generate Amazon CloudFront signed URLs and signed cookies. A defense-in-depth enhancement has been implemented to improve handling of special characters, such as...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.