porro

Advisories  /  composer  /  craftcms

composer

craftcms/aws-s3

Security advisories for craftcms/aws-s3, newest first. 1 known, 1 without a fix yet.

Latest version

2.3.2

Advisories

1 · 1 unfixed

Last advisory

16 Mar 2026

Safe from

no fix for all yet

1 advisory · newest first

MODERATE 16 Mar 2026

Amazon S3 for Craft CMS has an Information Disclosure vulnerability

GHSA-hwj7-4vgc-j3v9 · CVE-2026-32265

Affected

≥ 2.0.2, ≤ 2.2.4

Fixed in

no fix yet
/advisories/composer/craftcms/aws-s3/feed.rss

From Packagist and the GitHub advisory database · synced hourly

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →