Amazon.Extensions.S3.Encryption vulnerabilities

CVEs whose affected-version data names the Amazon.Extensions.S3.Encryption package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-110310Medium· 5.3

2w ago

A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS#1 v1.5

A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS#1 v1.5. Since this padding scheme is susceptible to the well-known…

▾ SunlitAmazon · Amazon.Extensions.S3.EncryptionEPSS 0.51%via NVD