Vulnerabilities for aws-encryption-sdk

First version without a known vulnerability: 4.0.5

Details

• GHSA-v638-38fc-rhfv2026-04-24

  AWS Encryption SDK for Python: Key commitment policy bypass via shared key cache

  Fixed in: 3.3.1, 4.0.5

• GHSA-wqgp-vphw-hphf2021-10-12

  Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness

  Fixed in: 2.0.0

• GHSA-x5h4-9gqw-942j2021-06-01

  Improper Verification of Cryptographic Signature in aws-encryption-sdk

  Fixed in: 1.9.0, 2.2.0