software.amazon.awssdk/cloudfront vulnerabilities

Latest software.amazon.awssdk/cloudfront CVEs

Newest publication first

1. GHSA-443w-3rq3-5m5h AWS SDK for Java 2.0: Improper Handling of Special Characters in CloudFront Signing Utilities

   Published 2026-03-27

   High·CVSS 7.7

   Summary This notification is related to the CloudFront signing utilities in the AWS SDK for Java v2, which are used to generate Amazon CloudFront signed URLs and signed cookies. A defense-in-depth enhancement has been implemented to improve handling of special characters, such as...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.