Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

localstack

3 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3
Registry
PyPI

Advisories 3

  • Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a…

    Affected: through 3.0.0; all versions.

  • The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter.

    Affected: fixed in 0.12.6.1; fixed in 0.12.10.

  • A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6.

    Affected: through 0.12.10; fixed in 0.12.6.1.