localstack

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

localstack records in CISA KEV

No localstack vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Localstack 3 records MEDIUM

Records

4 records

TI-2026-13952 CVE-2026-16763 · GHSA-64cc-4fc3-52m3

localstack serverless-localstack Configuration index.js os command injection

MEDIUM 55

A vulnerability was identified in localstack serverless-localstack up to 1.4.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.01224 Published 2026-07-23 No fix listed CWE-77

TI-2021-12043 CVE-2021-32090 · GHSA-hpr6-f4vq-mxch

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject…

MEDIUM 46

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02113 Published 2021-05-07 Fixed in 0.12.10 CWE-78

TI-2023-26017 CVE-2023-48054 · GHSA-8633-g3ph-97rp

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on…

LOW 34

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00301 Published 2023-11-16 No fix listed CWE-295

TI-2021-12044 CVE-2021-32091 · GHSA-37m5-42qp-4qpr

A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6.

LOW 29

A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00846 Published 2021-05-07 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	2
Low	0
No CVSS	0