software.amazon.cryptography vulnerabilities

Products

• software.amazon.cryptography/aws-database-encryption-sdk-dynamodb 1

Latest software.amazon.cryptography CVEs

Newest publication first

1. GHSA-72fp-w44g-625q Signing DynamoDB Sets when using the AWS Database Encryption SDK.

   Published 2023-11-09

   Unknown

   Impact This advisory addresses an issue when a DynamoDB Set attribute is marked as SIGN_ONLY in the AWS Database Encryption SDK (DB-ESDK) for DynamoDB. This also includes when a Set is part of a List or a Map. DB-ESDK for DynamoDB supports SIGN_ONLY and ENCRYPT_AND_SIGN attribute...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.