low
3.7
GHSA-g59m-gf8j-gjf5 json
AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value
published 10mo ago modified 2mo ago
- cvss
- 3.7
- version 3.1, GitHub
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- —
- no score, EPSS covers CVEs only
- public exploits
- 0
- none known
Summary
## **Summary** This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value.
A defense-in-depth enhancement has been implemented in the AWS SDK for Rust. This enhancement validates that a region used to construct an endpoint URL is a valid host label. The change was released on November 6, 2025. This advisory is informational to help customers understand their responsibilities regarding configuration security.
## **Impact** Customer applications could be configured to improperly route AWS API calls to non-existent or non-AWS hosts. While the SDK was functioning safely within the requirements of the shared responsibility model, additional safeguards have been added to support secure customer implementations.
**Impacted versions**: All versions prior to [November 6, 2025 release](https://github.com/awslabs/aws-sdk-rust/releases/tag/release-2025-11-06)
## **Patches** On November 6, 2025, an enhancement [1] was made to the AWS SDK for Rust release, which validates the formatting of a region, providing additional safeguards.
## **Workarounds** No workarounds are needed, but as always developers should ensure that their application is following security best practices: - Implement proper input validation in your application code - Update to the latest AWS SDK for Rust release on a regular basis - Follow AWS security best practices [2] for SDK configuration
## **References** Contact AWS Security via the vulnerability reporting page or email [aws-security@amazon.com](mailto:aws-security@amazon.com).
## **Acknowledgement** AWS Security thanks Guy Arazi for bringing these customer security considerations to our attention through the coordinated disclosure process.
[1] https://github.com/smithy-lang/smithy-rs/pull/4383 [2] https://docs.aws.amazon.com/sdk-for-rust/latest/dg/security.html
Patch / fix
- crates.io aws-sdk-accessanalyzer 1.96.0
- crates.io aws-sdk-account 1.92.0
- crates.io aws-sdk-acm 1.92.0
- crates.io aws-sdk-acmpca 1.94.0
- crates.io aws-sdk-aiops 1.18.0
- crates.io aws-sdk-amp 1.95.0
- crates.io aws-sdk-amplify 1.98.0
- crates.io aws-sdk-amplifybackend 1.89.0
- crates.io aws-sdk-amplifyuibuilder 1.89.0
- crates.io aws-sdk-apigateway 1.92.0
- crates.io aws-sdk-apigatewaymanagement 1.89.0
- crates.io aws-sdk-apigatewayv2 1.91.0
- crates.io aws-sdk-appconfig 1.94.0
- crates.io aws-sdk-appconfigdata 1.89.0
- crates.io aws-sdk-appfabric 1.89.0
- crates.io aws-sdk-appflow 1.89.0
- crates.io aws-sdk-appintegrations 1.90.0
- crates.io aws-sdk-applicationautoscaling 1.95.0
- crates.io aws-sdk-applicationcostprofiler 1.89.0
- crates.io aws-sdk-applicationdiscovery 1.91.0
- crates.io aws-sdk-applicationinsights 1.90.0
- crates.io aws-sdk-applicationsignals 1.67.0
- crates.io aws-sdk-appmesh 1.89.0
- crates.io aws-sdk-apprunner 1.90.0
- crates.io aws-sdk-appstream 1.95.0
- crates.io aws-sdk-appsync 1.102.0
- crates.io aws-sdk-arcregionswitch 1.9.0
- crates.io aws-sdk-arczonalshift 1.93.0
- crates.io aws-sdk-artifact 1.79.0
- crates.io aws-sdk-athena 1.94.0
- github.com/smithy-lang/smithy-rs#4383 pull request
Is GHSA-g59m-gf8j-gjf5 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerCVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| GitHub | 3.1 | 3.7 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| crates.io | aws-sdk-accessanalyzer | <1.96.0 |
1.96.0 |
| crates.io | aws-sdk-account | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-acm | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-acmpca | <1.94.0 |
1.94.0 |
| crates.io | aws-sdk-aiops | <1.18.0 |
1.18.0 |
| crates.io | aws-sdk-amp | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-amplify | <1.98.0 |
1.98.0 |
| crates.io | aws-sdk-amplifybackend | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-amplifyuibuilder | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-apigateway | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-apigatewaymanagement | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-apigatewayv2 | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-appconfig | <1.94.0 |
1.94.0 |
| crates.io | aws-sdk-appconfigdata | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-appfabric | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-appflow | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-appintegrations | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-applicationautoscaling | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-applicationcostprofiler | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-applicationdiscovery | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-applicationinsights | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-applicationsignals | <1.67.0 |
1.67.0 |
| crates.io | aws-sdk-appmesh | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-apprunner | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-appstream | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-appsync | <1.102.0 |
1.102.0 |
| crates.io | aws-sdk-arcregionswitch | <1.9.0 |
1.9.0 |
| crates.io | aws-sdk-arczonalshift | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-artifact | <1.79.0 |
1.79.0 |
| crates.io | aws-sdk-athena | <1.94.0 |
1.94.0 |
| crates.io | aws-sdk-auditmanager | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-autoscaling | <1.100.0 |
1.100.0 |
| crates.io | aws-sdk-autoscalingplans | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-b2bi | <1.96.0 |
1.96.0 |
| crates.io | aws-sdk-backup | <1.96.0 |
1.96.0 |
| crates.io | aws-sdk-backupgateway | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-backupsearch | <1.38.0 |
1.38.0 |
| crates.io | aws-sdk-batch | <1.100.0 |
1.100.0 |
| crates.io | aws-sdk-bcmdashboards | <1.7.0 |
1.7.0 |
| crates.io | aws-sdk-bcmdataexports | <1.86.0 |
1.86.0 |
| crates.io | aws-sdk-bcmpricingcalculator | <1.44.0 |
1.44.0 |
| crates.io | aws-sdk-bcmrecommendedactions | <1.7.0 |
1.7.0 |
| crates.io | aws-sdk-bedrock | <1.120.0 |
1.120.0 |
| crates.io | aws-sdk-bedrockagent | <1.119.0 |
1.119.0 |
| crates.io | aws-sdk-bedrockagentcore | <1.17.0 |
1.17.0 |
| crates.io | aws-sdk-bedrockagentcorecontrol | <1.21.0 |
1.21.0 |
| crates.io | aws-sdk-bedrockagentruntime | <1.116.0 |
1.116.0 |
| crates.io | aws-sdk-bedrockdataautomation | <1.42.0 |
1.42.0 |
| crates.io | aws-sdk-bedrockdataautomationruntime | <1.40.0 |
1.40.0 |
| crates.io | aws-sdk-bedrockruntime | <1.113.0 |
1.113.0 |
| crates.io | aws-sdk-billing | <1.43.0 |
1.43.0 |
| crates.io | aws-sdk-billingconductor | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-braket | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-budgets | <1.96.0 |
1.96.0 |
| crates.io | aws-sdk-chatbot | <1.79.0 |
1.79.0 |
| crates.io | aws-sdk-chime | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-chimesdkidentity | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-chimesdkmediapipelines | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-chimesdkmeetings | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-chimesdkmessaging | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-chimesdkvoice | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-cleanrooms | <1.107.0 |
1.107.0 |
| crates.io | aws-sdk-cleanroomsml | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-cloud9 | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-cloudcontrol | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-clouddirectory | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-cloudformation | <1.99.0 |
1.99.0 |
| crates.io | aws-sdk-cloudfront | <1.102.0 |
1.102.0 |
| crates.io | aws-sdk-cloudfrontkeyvaluestore | <1.88.0 |
1.88.0 |
| crates.io | aws-sdk-cloudhsm | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-cloudhsmv2 | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-cloudsearch | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-cloudsearchdomain | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-cloudtrail | <1.96.0 |
1.96.0 |
| crates.io | aws-sdk-cloudtraildata | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-cloudwatch | <1.97.0 |
1.97.0 |
| crates.io | aws-sdk-cloudwatchevents | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-cloudwatchlogs | <1.107.0 |
1.107.0 |
| crates.io | aws-sdk-codeartifact | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-codebuild | <1.113.0 |
1.113.0 |
| crates.io | aws-sdk-codecatalyst | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-codecommit | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-codeconnections | <1.73.0 |
1.73.0 |
| crates.io | aws-sdk-codedeploy | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-codeguruprofiler | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-codegurureviewer | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-codegurusecurity | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-codepipeline | <1.99.0 |
1.99.0 |
| crates.io | aws-sdk-codestarconnections | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-codestarnotifications | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-cognitoidentity | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-cognitoidentityprovider | <1.103.0 |
1.103.0 |
| crates.io | aws-sdk-cognitosync | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-comprehend | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-comprehendmedical | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-computeoptimizer | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-config | <1.94.0 |
1.94.0 |
| crates.io | aws-sdk-connect | <1.136.0 |
1.136.0 |
| crates.io | aws-sdk-connectcampaigns | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-connectcampaignsv2 | <1.41.0 |
1.41.0 |
| crates.io | aws-sdk-connectcases | <1.97.0 |
1.97.0 |
| crates.io | aws-sdk-connectcontactlens | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-connectparticipant | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-controlcatalog | <1.74.0 |
1.74.0 |
| crates.io | aws-sdk-controltower | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-costandusagereport | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-costexplorer | <1.101.0 |
1.101.0 |
| crates.io | aws-sdk-costoptimizationhub | <1.94.0 |
1.94.0 |
| crates.io | aws-sdk-customerprofiles | <1.98.0 |
1.98.0 |
| crates.io | aws-sdk-databasemigration | <1.98.0 |
1.98.0 |
| crates.io | aws-sdk-databrew | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-dataexchange | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-datapipeline | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-datasync | <1.97.0 |
1.97.0 |
| crates.io | aws-sdk-datazone | <1.112.0 |
1.112.0 |
| crates.io | aws-sdk-dax | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-deadline | <1.83.0 |
1.83.0 |
| crates.io | aws-sdk-detective | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-devicefarm | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-devopsguru | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-directconnect | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-directory | <1.94.0 |
1.94.0 |
| crates.io | aws-sdk-directoryservicedata | <1.46.0 |
1.46.0 |
| crates.io | aws-sdk-dlm | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-docdb | <1.96.0 |
1.96.0 |
| crates.io | aws-sdk-docdbelastic | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-drs | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-dsql | <1.44.0 |
1.44.0 |
| crates.io | aws-sdk-dynamodb | <1.98.0 |
1.98.0 |
| crates.io | aws-sdk-dynamodbstreams | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-ebs | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-ec2 | <1.181.0 |
1.181.0 |
| crates.io | aws-sdk-ec2instanceconnect | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-ecr | <1.98.0 |
1.98.0 |
| crates.io | aws-sdk-ecrpublic | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-ecs | <1.104.0 |
1.104.0 |
| crates.io | aws-sdk-efs | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-eks | <1.113.0 |
1.113.0 |
| crates.io | aws-sdk-eksauth | <1.86.0 |
1.86.0 |
| crates.io | aws-sdk-elasticache | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-elasticbeanstalk | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-elasticloadbalancing | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-elasticloadbalancingv2 | <1.99.0 |
1.99.0 |
| crates.io | aws-sdk-elasticsearch | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-elastictranscoder | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-emr | <1.96.0 |
1.96.0 |
| crates.io | aws-sdk-emrcontainers | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-emrserverless | <1.97.0 |
1.97.0 |
| crates.io | aws-sdk-entityresolution | <1.98.0 |
1.98.0 |
| crates.io | aws-sdk-eventbridge | <1.96.0 |
1.96.0 |
| crates.io | aws-sdk-evidently | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-evs | <1.19.0 |
1.19.0 |
| crates.io | aws-sdk-finspace | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-finspacedata | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-firehose | <1.97.0 |
1.97.0 |
| crates.io | aws-sdk-fis | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-fms | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-forecast | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-forecastquery | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-frauddetector | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-freetier | <1.87.0 |
1.87.0 |
| crates.io | aws-sdk-fsx | <1.100.0 |
1.100.0 |
| crates.io | aws-sdk-gamelift | <1.96.0 |
1.96.0 |
| crates.io | aws-sdk-gameliftstreams | <1.31.0 |
1.31.0 |
| crates.io | aws-sdk-geomaps | <1.44.0 |
1.44.0 |
| crates.io | aws-sdk-geoplaces | <1.43.0 |
1.43.0 |
| crates.io | aws-sdk-georoutes | <1.43.0 |
1.43.0 |
| crates.io | aws-sdk-glacier | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-globalaccelerator | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-glue | <1.128.0 |
1.128.0 |
| crates.io | aws-sdk-grafana | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-greengrass | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-greengrassv2 | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-groundstation | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-guardduty | <1.103.0 |
1.103.0 |
| crates.io | aws-sdk-health | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-healthlake | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-iam | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-identitystore | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-imagebuilder | <1.96.0 |
1.96.0 |
| crates.io | aws-sdk-inspector | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-inspector2 | <1.99.0 |
1.99.0 |
| crates.io | aws-sdk-inspectorscan | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-internetmonitor | <1.94.0 |
1.94.0 |
| crates.io | aws-sdk-invoicing | <1.40.0 |
1.40.0 |
| crates.io | aws-sdk-iot | <1.100.0 |
1.100.0 |
| crates.io | aws-sdk-iotanalytics | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-iotdataplane | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-iotdeviceadvisor | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-iotevents | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-ioteventsdata | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-iotfleetwise | <1.96.0 |
1.96.0 |
| crates.io | aws-sdk-iotjobsdataplane | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-iotmanagedintegrations | <1.31.0 |
1.31.0 |
| crates.io | aws-sdk-iotsecuretunneling | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-iotsitewise | <1.96.0 |
1.96.0 |
| crates.io | aws-sdk-iotthingsgraph | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-iottwinmaker | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-iotwireless | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-ivs | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-ivschat | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-ivsrealtime | <1.100.0 |
1.100.0 |
| crates.io | aws-sdk-kafka | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-kafkaconnect | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-kendra | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-kendraranking | <1.88.0 |
1.88.0 |
| crates.io | aws-sdk-keyspaces | <1.94.0 |
1.94.0 |
| crates.io | aws-sdk-keyspacesstreams | <1.16.0 |
1.16.0 |
| crates.io | aws-sdk-kinesis | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-kinesisanalytics | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-kinesisanalyticsv2 | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-kinesisvideo | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-kinesisvideoarchivedmedia | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-kinesisvideomedia | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-kinesisvideosignaling | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-kinesisvideowebrtcstorage | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-kms | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-lakeformation | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-lambda | <1.104.0 |
1.104.0 |
| crates.io | aws-sdk-launchwizard | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-lexmodelbuilding | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-lexmodelsv2 | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-lexruntime | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-lexruntimev2 | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-licensemanager | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-licensemanagerlinuxsubscriptions | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-licensemanagerusersubscriptions | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-lightsail | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-location | <1.94.0 |
1.94.0 |
| crates.io | aws-sdk-lookoutequipment | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-m2 | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-machinelearning | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-macie2 | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-mailmanager | <1.72.0 |
1.72.0 |
| crates.io | aws-sdk-managedblockchain | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-managedblockchainquery | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-marketplaceagreement | <1.86.0 |
1.86.0 |
| crates.io | aws-sdk-marketplacecatalog | <1.94.0 |
1.94.0 |
| crates.io | aws-sdk-marketplacecommerceanalytics | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-marketplacedeployment | <1.86.0 |
1.86.0 |
| crates.io | aws-sdk-marketplaceentitlement | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-marketplacemetering | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-marketplacereporting | <1.45.0 |
1.45.0 |
| crates.io | aws-sdk-mediaconnect | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-mediaconvert | <1.110.0 |
1.110.0 |
| crates.io | aws-sdk-medialive | <1.114.0 |
1.114.0 |
| crates.io | aws-sdk-mediapackage | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-mediapackagev2 | <1.99.0 |
1.99.0 |
| crates.io | aws-sdk-mediapackagevod | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-mediastore | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-mediastoredata | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-mediatailor | <1.97.0 |
1.97.0 |
| crates.io | aws-sdk-medicalimaging | <1.94.0 |
1.94.0 |
| crates.io | aws-sdk-memorydb | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-mgn | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-migrationhub | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-migrationhubconfig | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-migrationhuborchestrator | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-migrationhubrefactorspaces | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-migrationhubstrategy | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-mpa | <1.16.0 |
1.16.0 |
| crates.io | aws-sdk-mq | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-mturk | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-mwaa | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-neptune | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-neptunedata | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-neptunegraph | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-networkfirewall | <1.98.0 |
1.98.0 |
| crates.io | aws-sdk-networkflowmonitor | <1.43.0 |
1.43.0 |
| crates.io | aws-sdk-networkmanager | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-networkmonitor | <1.80.0 |
1.80.0 |
| crates.io | aws-sdk-notifications | <1.42.0 |
1.42.0 |
| crates.io | aws-sdk-notificationscontacts | <1.40.0 |
1.40.0 |
| crates.io | aws-sdk-oam | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-observabilityadmin | <1.42.0 |
1.42.0 |
| crates.io | aws-sdk-odb | <1.15.0 |
1.15.0 |
| crates.io | aws-sdk-omics | <1.96.0 |
1.96.0 |
| crates.io | aws-sdk-opensearch | <1.103.0 |
1.103.0 |
| crates.io | aws-sdk-opensearchserverless | <1.96.0 |
1.96.0 |
| crates.io | aws-sdk-organizations | <1.100.0 |
1.100.0 |
| crates.io | aws-sdk-osis | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-outposts | <1.99.0 |
1.99.0 |
| crates.io | aws-sdk-panorama | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-partnercentralselling | <1.43.0 |
1.43.0 |
| crates.io | aws-sdk-paymentcryptography | <1.96.0 |
1.96.0 |
| crates.io | aws-sdk-paymentcryptographydata | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-pcaconnectorad | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-pcaconnectorscep | <1.59.0 |
1.59.0 |
| crates.io | aws-sdk-pcs | <1.58.0 |
1.58.0 |
| crates.io | aws-sdk-personalize | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-personalizeevents | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-personalizeruntime | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-pi | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-pinpoint | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-pinpointemail | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-pinpointsmsvoice | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-pinpointsmsvoicev2 | <1.97.0 |
1.97.0 |
| crates.io | aws-sdk-pipes | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-polly | <1.94.0 |
1.94.0 |
| crates.io | aws-sdk-pricing | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-proton | <1.88.0 |
1.88.0 |
| crates.io | aws-sdk-qapps | <1.57.0 |
1.57.0 |
| crates.io | aws-sdk-qbusiness | <1.104.0 |
1.104.0 |
| crates.io | aws-sdk-qconnect | <1.98.0 |
1.98.0 |
| crates.io | aws-sdk-quicksight | <1.111.0 |
1.111.0 |
| crates.io | aws-sdk-ram | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-rbin | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-rds | <1.114.0 |
1.114.0 |
| crates.io | aws-sdk-rdsdata | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-redshift | <1.94.0 |
1.94.0 |
| crates.io | aws-sdk-redshiftdata | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-redshiftserverless | <1.94.0 |
1.94.0 |
| crates.io | aws-sdk-rekognition | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-repostspace | <1.88.0 |
1.88.0 |
| crates.io | aws-sdk-resiliencehub | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-resourceexplorer2 | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-resourcegroups | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-resourcegroupstagging | <1.88.0 |
1.88.0 |
| crates.io | aws-sdk-rolesanywhere | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-route53 | <1.100.0 |
1.100.0 |
| crates.io | aws-sdk-route53domains | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-route53profiles | <1.68.0 |
1.68.0 |
| crates.io | aws-sdk-route53recoverycluster | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-route53recoverycontrolconfig | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-route53recoveryreadiness | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-route53resolver | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-rtbfabric | <1.3.0 |
1.3.0 |
| crates.io | aws-sdk-rum | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-s3 | <1.112.0 |
1.112.0 |
| crates.io | aws-sdk-s3control | <1.103.0 |
1.103.0 |
| crates.io | aws-sdk-s3outposts | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-s3tables | <1.43.0 |
1.43.0 |
| crates.io | aws-sdk-s3vectors | <1.14.0 |
1.14.0 |
| crates.io | aws-sdk-sagemaker | <1.166.0 |
1.166.0 |
| crates.io | aws-sdk-sagemakera2iruntime | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-sagemakeredge | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-sagemakerfeaturestoreruntime | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-sagemakergeospatial | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-sagemakermetrics | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-sagemakerruntime | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-savingsplans | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-scheduler | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-schemas | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-secretsmanager | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-securityhub | <1.97.0 |
1.97.0 |
| crates.io | aws-sdk-securityir | <1.42.0 |
1.42.0 |
| crates.io | aws-sdk-securitylake | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-serverlessapplicationrepository | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-servicecatalog | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-servicecatalogappregistry | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-servicediscovery | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-servicequotas | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-ses | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-sesv2 | <1.103.0 |
1.103.0 |
| crates.io | aws-sdk-sfn | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-shield | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-signer | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-simspaceweaver | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-snowball | <1.88.0 |
1.88.0 |
| crates.io | aws-sdk-snowdevicemanagement | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-sns | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-socialmessaging | <1.44.0 |
1.44.0 |
| crates.io | aws-sdk-sqs | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-ssm | <1.99.0 |
1.99.0 |
| crates.io | aws-sdk-ssmcontacts | <1.88.0 |
1.88.0 |
| crates.io | aws-sdk-ssmguiconnect | <1.24.0 |
1.24.0 |
| crates.io | aws-sdk-ssmincidents | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-ssmquicksetup | <1.53.0 |
1.53.0 |
| crates.io | aws-sdk-ssmsap | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-sso | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-ssoadmin | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-ssooidc | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-storagegateway | <1.96.0 |
1.96.0 |
| crates.io | aws-sdk-sts | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-supplychain | <1.84.0 |
1.84.0 |
| crates.io | aws-sdk-support | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-supportapp | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-swf | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-synthetics | <1.97.0 |
1.97.0 |
| crates.io | aws-sdk-taxsettings | <1.67.0 |
1.67.0 |
| crates.io | aws-sdk-textract | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-timestreaminfluxdb | <1.78.0 |
1.78.0 |
| crates.io | aws-sdk-timestreamquery | <1.93.0 |
1.93.0 |
| crates.io | aws-sdk-timestreamwrite | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-tnb | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-transcribe | <1.94.0 |
1.94.0 |
| crates.io | aws-sdk-transcribestreaming | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-transfer | <1.102.0 |
1.102.0 |
| crates.io | aws-sdk-translate | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-trustedadvisor | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-verifiedpermissions | <1.99.0 |
1.99.0 |
| crates.io | aws-sdk-voiceid | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-vpclattice | <1.92.0 |
1.92.0 |
| crates.io | aws-sdk-waf | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-wafregional | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-wafv2 | <1.101.0 |
1.101.0 |
| crates.io | aws-sdk-wellarchitected | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-wisdom | <1.90.0 |
1.90.0 |
| crates.io | aws-sdk-workdocs | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-workmail | <1.91.0 |
1.91.0 |
| crates.io | aws-sdk-workmailmessageflow | <1.89.0 |
1.89.0 |
| crates.io | aws-sdk-workspaces | <1.105.0 |
1.105.0 |
| crates.io | aws-sdk-workspacesinstances | <1.16.0 |
1.16.0 |
| crates.io | aws-sdk-workspacesthinclient | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-workspacesweb | <1.95.0 |
1.95.0 |
| crates.io | aws-sdk-xray | <1.90.0 |
1.90.0 |
Classification
- Weakness
-
- CWE-20 Improper Input Validation
References
Sources
- GitHub Advisory GHSA-g59m-gf8j-gjf5
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.