Vulnerability Bulletins

Issue with AWS SAM CLI (CVE-2025-3047, CVE-2025-3048)

   
Affected software AmazonWS
 
Scope: AWS Content Type: Important (requires attention) Publication Date: 2025/03/31 08:10 AM PDT Description The AWS Serverless Application Model Command Line Interface (AWS SAM CLI) is an open-source CLI tool that helps Lambda developers to build and develop Lambda applications locally on their computers using Docker. We have identified the following issues within the AWS SAM CLI. A fix has been released and we recommend users upgrade to the latest version to address these issues.

More info:

https://aws.amazon.com/security/security-bulletins/AWS-2025-008/