ex-aws

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

ex-aws records in CISA KEV

No ex-aws vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-34676 CVE-2026-47074 · GHSA-8jgf-23q5-x7xx

ex_aws_sns SigningCertURL not validated in verify_message/1

MEDIUM 43

Improper Certificate Validation vulnerability in ex-aws ex_aws_sns (ExAws.SNS, ExAws.SNS.PublicKeyCache modules) allows Signature Spoofing by Improper Validation.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00226 Published 2026-05-28 Fixed in 2.3.5 CWE-295

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0