Search for packages
| purl | pkg:pypi/localstack@0.12.6.1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-7bbn-p22w-dqc5
Aliases: CVE-2023-48054 GHSA-8633-g3ph-97rp PYSEC-2023-243 |
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack. |
Affected by 0 other vulnerabilities. |
|
VCID-g51t-twvs-b3d4
Aliases: CVE-2021-32090 GHSA-hpr6-f4vq-mxch PYSEC-2021-101 |
The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter. |
Affected by 2 other vulnerabilities. |
|
VCID-qrra-fj1x-kucf
Aliases: CVE-2021-32091 GHSA-37m5-42qp-4qpr PYSEC-2021-102 |
A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-g51t-twvs-b3d4 | The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter. |
CVE-2021-32090
GHSA-hpr6-f4vq-mxch PYSEC-2021-101 |
| VCID-qrra-fj1x-kucf | A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6. |
CVE-2021-32091
GHSA-37m5-42qp-4qpr PYSEC-2021-102 |