aws/aws-sdk-php vulnerabilities
AWS SDK for PHP - Use Amazon Web Services in your PHP project
- Registry
- Composer
- Latest
- 3.402.0
- License
- Apache-2.0
4 known advisories
The latest version, 3.402.0, is not affected by any of them. Projects on older versions may be.
Update to the latest version:
composer require aws/aws-sdk-php:^3.402.0Security advisories for aws/aws-sdk-php
AWS SDK for PHP has CloudFront Policy Document Injection via Special Characters
- Affected
- >=3.11.7 <3.371.4
- Fixed in
- 3.371.4
AWS SDK for PHP's S3 Encryption Client has a Key Commitment Issue
- Affected
- <3.368.0
- Fixed in
- 3.368.0
Potential URI resolution path traversal in the AWS SDK for PHP
- Affected
- <3.288.1
- Fixed in
- 3.288.1
Doctrine Security Misconfiguration Vulnerability
- Affected
- >=3.0.0 <3.2.1
- Fixed in
- 3.2.1
Which of your client projects still run an old aws/aws-sdk-php?
NPMscan reads the composer.lock in every GitHub repo you pick and checks each installed version against these advisories, including the packages your packages pull in. Each finding comes with the command that fixes it.
Other Composer packages
Advisory data from OSV.dev (opens OSV.dev in a new tab), refreshed daily. Package details from the Composer registry.