aws/aws-sdk-php

Security advisories for aws/aws-sdk-php, newest first. 4 known, 1 without a fix yet.

RSS feed Check your lock file →

Latest version

3.402.4

Advisories

4 · 1 unfixed

Last advisory

27 Mar 2026

Safe from

no fix for all yet

4 advisories · newest first

HIGH 27 Mar 2026

AWS SDK for PHP has CloudFront Policy Document Injection via Special Characters

GHSA-27qh-8cxx-2cr5

Affected

≥ 3.11.7, ≤ 3.371.3

Fixed in

no fix yet

Published

27 Mar 2026

MODERATE 17 Dec 2025

Key Commitment Issues in S3 Encryption Clients

PKSA-dxyf-6n16-t87m · CVE-2025-14761

Affected

≥ 3.0.0, < 3.368.0

Fixed in

3.368.0

Published

17 Dec 2025

MODERATE6.0 22 Nov 2023

Potential URI resolution path traversal in the AWS SDK for PHP

PKSA-n3s6-289w-qtqb · CVE-2023-51651

Affected

≥ 3.0.0, < 3.288.1

Fixed in

3.288.1

Published

22 Nov 2023

HIGH7.8 24 Jul 2015

Security Misconfiguration Vulnerability in the AWS SDK for PHP

PKSA-stsw-jsf7-f6vs · CVE-2015-5723

Affected

≥ 3.0.0, < 3.2.1

Fixed in

3.2.1

Published

24 Jul 2015

/advisories/composer/aws/aws-sdk-php/feed.rss

From Packagist and the GitHub advisory database · synced hourly

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →