aws / aws/aws-sam-cli

Version 1.120.0 Affected by CVE-2024-5535

Open
#7,253 3 comments 0 reactions 0 assignees View on GitHub
area/dependencies
Dominant language
Python
Stars
6.7k
Forks
1.2k
Avg merge
1d 10h
Merged PRs (30d)
52

Description

### Description:

Authenticated vulnerability scans are detecting the latest version as being vulnerable to CVE-2024-5535 related to OpenSSL verison 1.1.1w.

Tenable Nessus Agent reports the following:

Path : /usr/local/aws-sam-cli/dist/_internal/libcrypto.so.1.1
Reported version : 1.1.1w
Fixed version : 1.1.1za

Path : /usr/local/aws-sam-cli/dist/_internal/libssl.so.1.1
Reported version : 1.1.1w
Fixed version : 1.1.1za

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.