Vulnerabilities

TI-2026-13952 CVE-2026-16763 · GHSA-64cc-4fc3-52m3

localstack serverless-localstack Configuration index.js os command injection

MEDIUM 55

A vulnerability was identified in localstack serverless-localstack up to 1.4.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.01224 Published 2026-07-23 No fix listed CWE-77

TI-2023-26017 CVE-2023-48054 · GHSA-8633-g3ph-97rp

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on…

LOW 34

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00301 Published 2023-11-16 No fix listed CWE-295

TI-2021-12043 CVE-2021-32090 · GHSA-hpr6-f4vq-mxch

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject…

MEDIUM 46

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02113 Published 2021-05-07 Fixed in 0.12.10 CWE-78

TI-2021-12044 CVE-2021-32091 · GHSA-37m5-42qp-4qpr

A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6.

LOW 29

A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00846 Published 2021-05-07 No fix listed CWE-79

Vulnerabilities

Filters

localstack serverless-localstack Configuration index.js os command injection

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on…

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject…

A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6.