Vulnerability Reportopensearchproject/opensearch:2.0.1

opensearchproject/opensearch:2.0.1
digestsha256:a0463734a3923708ee41e29b89fdb685776296e2af76fa717a367f9f9aba0a54

Executive Summary

Last scanned:

Threat Score
74/100CAUTION
Reputation
TRUSTED

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. With 366 exposed vulnerabilities and a maximum severity of 9.75, the attack surface is substantial. Remote attackers could exploit CVE-2023-44487 or CVE-2020-36221 to crash the service or exhaust resources, while other high-severity issues may expose sensitive data. Network segmentation, strict firewalling, and disabling non-essential protocols are strongly advised before any limited use.

Vulnerabilities

Vulnerability Log

859 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2023-44487CRITICAL9.75
libnghttp2
1.41.0-1.amzn2
fixed in 1.41.0-1.amzn2.0.4
100.0%
Actively Exploited
Directly Exposed
CVE-2020-36221CRITICAL9.75
openldap
2.4.44-23.amzn2.0.4
fixed in 2.4.44-25.amzn2.0.5
84.2%
Actively Exploited
Directly Exposed
CVE-2020-36222CRITICAL9.75
openldap
2.4.44-23.amzn2.0.4
fixed in 2.4.44-25.amzn2.0.5
77.7%
Actively Exploited
Directly Exposed
CVE-2020-36227CRITICAL9.75
openldap
2.4.44-23.amzn2.0.4
fixed in 2.4.44-25.amzn2.0.5
77.7%
Actively Exploited
Directly Exposed
CVE-2020-36228CRITICAL9.75
openldap
2.4.44-23.amzn2.0.4
fixed in 2.4.44-25.amzn2.0.5
83.4%
Actively Exploited
Directly Exposed
CVE-2021-27212CRITICAL9.75
openldap
2.4.44-23.amzn2.0.4
fixed in 2.4.44-25.amzn2.0.5
64.1%
Actively Exploited
Directly Exposed
CVE-2023-0286CRITICAL9.62
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.6
59.5%
Actively Exploited
Directly Exposed
CVE-2022-2068CRITICAL9.49
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.4
95.8%
Actively Exploited
Directly Exposed
CVE-2024-37371CRITICAL9.1
krb5-libs
1.15.1-37.amzn2.2.4
fixed in 1.15.1-55.amzn2.2.8
1.9%
Low-Moderate Risk
Directly Exposed
CVE-2021-46848CRITICAL9.1
libtasn1
4.10-1.amzn2.0.2
fixed in 4.10-1.amzn2.0.3
2.0%
Low-Moderate Risk
Directly Exposed
CVE-2025-49796CRITICAL9.1
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.19
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2022-22825HIGH8.8
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-14.amzn2.0.1
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-22826HIGH8.8
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-14.amzn2.0.1
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-22827HIGH8.8
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-14.amzn2.0.1
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-42898HIGH8.8
krb5-libs
1.15.1-37.amzn2.2.4
fixed in 1.15.1-55.amzn2.2.5
6.4%
Low-Moderate Risk
Directly Exposed
CVE-2025-48734HIGH8.8
commons-beanutils:commons-beanutils
1.9.4
fixed in 1.11.0
1.5%
Low-Moderate Risk
Directly Exposed
CVE-2022-40303HIGH8.62
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.7
22.8%
High Exploitation Risk
Directly Exposed
CVE-2020-36230HIGH8.62
openldap
2.4.44-23.amzn2.0.4
fixed in 2.4.44-25.amzn2.0.5
12.3%
High Exploitation Risk
Directly Exposed
CVE-2022-40152HIGH8.62
com.fasterxml.woodstox:woodstox-core
6.2.6
fixed in 6.4.0, 5.4.0
19.7%
High Exploitation Risk
Directly Exposed
CVE-2023-2650HIGH8.45
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.7
75.1%
Actively Exploited
Directly Exposed
CVE-2025-14087HIGH8.33
glib2
2.56.1-9.amzn2.0.2
fixed in 2.56.1-9.amzn2.0.13
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-6653HIGH8.33
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.25
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42581HIGH8.33
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42581HIGH8.33
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2022-40674HIGH8.1
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-15.amzn2.0.1
1.8%
Low-Moderate Risk
Directly Exposed
CVE-2026-45447HIGH8.1
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.21
5.2%
Low-Moderate Risk
Directly Exposed
CVE-2021-46143HIGH7.8
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-14.amzn2.0.1
3.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-1304HIGH7.8
libcom_err
1.42.9-19.amzn2
fixed in 1.42.9-19.amzn2.0.1
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2022-40304HIGH7.8
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.7
6.8%
Low-Moderate Risk
Directly Exposed
CVE-2026-58016HIGH7.73
glib2
2.56.1-9.amzn2.0.2
fixed in 2.56.1-9.amzn2.0.14
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-49794HIGH7.73
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.19
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-42584HIGH7.73
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-42584HIGH7.73
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.8%
Theoretical Threat
Directly Exposed
CVE-2022-23990HIGH7.5
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-15.amzn2.0.3
4.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-43680HIGH7.5
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-15.amzn2.0.2
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-45490HIGH7.5
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-15.amzn2.0.4
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2018-16429HIGH7.5
glib2
2.56.1-9.amzn2.0.2
fixed in 2.56.1-9.amzn2.0.3
3.5%
Low-Moderate Risk
Directly Exposed
CVE-2009-5155HIGH7.5
glibc
2.26-58.amzn2
fixed in 2.26-62.amzn2
3.9%
Low-Moderate Risk
Directly Exposed
CVE-2009-5155HIGH7.5
glibc-common
2.26-58.amzn2
fixed in 2.26-62.amzn2
3.9%
Low-Moderate Risk
Directly Exposed
CVE-2009-5155HIGH7.5
glibc-langpack-en
2.26-58.amzn2
fixed in 2.26-62.amzn2
3.9%
Low-Moderate Risk
Directly Exposed
CVE-2009-5155HIGH7.5
glibc-minimal-langpack
2.26-58.amzn2
fixed in 2.26-62.amzn2
3.9%
Low-Moderate Risk
Directly Exposed
CVE-2021-43618HIGH7.5
gmp
1:6.0.0-15.amzn2.0.2
fixed in 1:6.0.0-15.amzn2.0.3
3.4%
Low-Moderate Risk
Directly Exposed
CVE-2009-5155HIGH7.5
libcrypt
2.26-58.amzn2
fixed in 2.26-62.amzn2
3.9%
Low-Moderate Risk
Directly Exposed
CVE-2023-35945HIGH7.5
libnghttp2
1.41.0-1.amzn2
fixed in 1.41.0-1.amzn2.0.1
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2025-27113HIGH7.5
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.16
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2025-6021HIGH7.5
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.18
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-23308HIGH7.5
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.5
6.0%
Low-Moderate Risk
Directly Exposed
CVE-2019-13565HIGH7.5
openldap
2.4.44-23.amzn2.0.4
fixed in 2.4.44-25.amzn2.0.5
5.0%
Low-Moderate Risk
Directly Exposed
CVE-2020-36223HIGH7.5
openldap
2.4.44-23.amzn2.0.4
fixed in 2.4.44-25.amzn2.0.5
4.3%
Low-Moderate Risk
Directly Exposed
CVE-2020-36224HIGH7.5
openldap
2.4.44-23.amzn2.0.4
fixed in 2.4.44-25.amzn2.0.5
4.3%
Low-Moderate Risk
Directly Exposed
CVE-2020-36226HIGH7.5
openldap
2.4.44-23.amzn2.0.4
fixed in 2.4.44-25.amzn2.0.5
4.3%
Low-Moderate Risk
Directly Exposed
CVE-2020-36229HIGH7.5
openldap
2.4.44-23.amzn2.0.4
fixed in 2.4.44-25.amzn2.0.5
4.3%
Low-Moderate Risk
Directly Exposed
CVE-2023-2953HIGH7.5
openldap
2.4.44-23.amzn2.0.4
fixed in 2.4.44-25.amzn2.0.6
1.9%
Low-Moderate Risk
Directly Exposed
CVE-2023-0215HIGH7.5
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.6
4.5%
Low-Moderate Risk
Directly Exposed
CVE-2026-28388HIGH7.5
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.20
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-28389HIGH7.5
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.20
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-28390HIGH7.5
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.20
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2023-0464HIGH7.5
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.7
3.7%
Low-Moderate Risk
Directly Exposed
CVE-2020-36518HIGH7.5
com.fasterxml.jackson.core:jackson-databind
2.12.6
fixed in 2.13.2.1, 2.12.6.1
4.9%
Low-Moderate Risk
Directly Exposed
CVE-2022-42003HIGH7.5
com.fasterxml.jackson.core:jackson-databind
2.12.6
fixed in 2.12.7.1, 2.13.4.2
2.7%
Low-Moderate Risk
Directly Exposed
CVE-2022-42004HIGH7.5
com.fasterxml.jackson.core:jackson-databind
2.12.6
fixed in 2.12.7.1, 2.13.4
2.7%
Low-Moderate Risk
Directly Exposed
CVE-2020-36518HIGH7.5
com.fasterxml.jackson.core:jackson-databind
2.13.2
fixed in 2.13.2.1, 2.12.6.1
4.9%
Low-Moderate Risk
Directly Exposed
CVE-2022-42003HIGH7.5
com.fasterxml.jackson.core:jackson-databind
2.13.2
fixed in 2.12.7.1, 2.13.4.2
2.7%
Low-Moderate Risk
Directly Exposed
CVE-2022-42004HIGH7.5
com.fasterxml.jackson.core:jackson-databind
2.13.2
fixed in 2.12.7.1, 2.13.4
2.7%
Low-Moderate Risk
Directly Exposed
CVE-2022-42003HIGH7.5
com.fasterxml.jackson.core:jackson-databind
2.13.2.2
fixed in 2.12.7.1, 2.13.4.2
2.7%
Low-Moderate Risk
Directly Exposed
CVE-2022-42004HIGH7.5
com.fasterxml.jackson.core:jackson-databind
2.13.2.2
fixed in 2.12.7.1, 2.13.4
2.7%
Low-Moderate Risk
Directly Exposed
CVE-2024-7254HIGH7.5
com.google.protobuf:protobuf-java
3.19.2
fixed in 3.25.5, 4.27.5, 4.28.2
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-3171HIGH7.5
com.google.protobuf:protobuf-java
3.19.2
fixed in 3.21.7, 3.20.3, 3.19.6, 3.16.3
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-7254HIGH7.5
com.google.protobuf:protobuf-java
3.19.4
fixed in 3.25.5, 4.27.5, 4.28.2
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-3171HIGH7.5
com.google.protobuf:protobuf-java
3.19.4
fixed in 3.21.7, 3.20.3, 3.19.6, 3.16.3
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2025-55163HIGH7.5
io.netty:netty-codec-http2
4.1.72.Final
fixed in 4.2.4.Final, 4.1.124.Final
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-33871HIGH7.5
io.netty:netty-codec-http2
4.1.72.Final
fixed in 4.1.132.Final, 4.2.11.Final
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2025-55163HIGH7.5
io.netty:netty-codec-http2
4.1.73.Final
fixed in 4.2.4.Final, 4.1.124.Final
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-33871HIGH7.5
io.netty:netty-codec-http2
4.1.73.Final
fixed in 4.1.132.Final, 4.2.11.Final
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-1370HIGH7.5
net.minidev:json-smart
2.4.7
fixed in 2.4.9
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-46363HIGH7.5
org.apache.cxf:cxf-core
3.4.5
fixed in 3.4.10, 3.5.5
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2025-23184HIGH7.5
org.apache.cxf:cxf-core
3.4.5
fixed in 3.5.10, 3.6.5, 4.0.6
2.0%
Low-Moderate Risk
Directly Exposed
CVE-2024-32007HIGH7.5
org.apache.cxf:cxf-rt-rs-security-jose
3.4.5
fixed in 4.0.5, 3.6.4, 3.5.9
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2022-45688HIGH7.5
org.json:json
20180813
fixed in 20230227
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2023-5072HIGH7.5
org.json:json
20180813
fixed in 20231013
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2023-34455HIGH7.5
org.xerial.snappy:snappy-java
1.1.8.1
fixed in 1.1.10.1
1.8%
Low-Moderate Risk
Directly Exposed
CVE-2023-43642HIGH7.5
org.xerial.snappy:snappy-java
1.1.8.1
fixed in 1.1.10.4
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2023-34453HIGH7.5
org.xerial.snappy:snappy-java
1.1.8.1
fixed in 1.1.10.1
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2023-34454HIGH7.5
org.xerial.snappy:snappy-java
1.1.8.1
fixed in 1.1.10.1
1.5%
Low-Moderate Risk
Directly Exposed
CVE-2022-25857HIGH7.5
org.yaml:snakeyaml
1.26
fixed in 1.31
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2023-0767HIGH7.48
nss
3.67.0-4.amzn2.0.2
fixed in 3.79.0-4.amzn2.0.1
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-0767HIGH7.48
nss-sysinit
3.67.0-4.amzn2.0.2
fixed in 3.79.0-4.amzn2.0.1
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-7104HIGH7.3
nss
3.67.0-4.amzn2.0.2
fixed in 3.90.0-2.amzn2.0.2
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2023-7104HIGH7.3
nss-sysinit
3.67.0-4.amzn2.0.2
fixed in 3.90.0-2.amzn2.0.2
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-28182MEDIUM6.89
libnghttp2
1.41.0-1.amzn2
fixed in 1.41.0-1.amzn2.0.5
84.8%
Actively Exploited
Directly Exposed
CVE-2026-54512MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.12.6
fixed in 2.18.8, 3.1.4, 2.21.4
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-54513MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.12.6
fixed in 2.18.8, 2.21.4, 3.1.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-54512MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.13.2
fixed in 2.18.8, 3.1.4, 2.21.4
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-54513MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.13.2
fixed in 2.18.8, 2.21.4, 3.1.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-54512MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.13.2.2
fixed in 2.18.8, 3.1.4, 2.21.4
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-54513MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.13.2.2
fixed in 2.18.8, 2.21.4, 3.1.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-44249MEDIUM6.88
io.netty:netty-handler
4.1.72.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-44249MEDIUM6.88
io.netty:netty-handler
4.1.73.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2022-4304MEDIUM6.79
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.6
16.2%
High Exploitation Risk
Directly Exposed
CVE-2026-25210MEDIUM6.63
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-15.amzn2.0.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2020-35457MEDIUM6.63
glib2
2.56.1-9.amzn2.0.2
fixed in 2.56.1-9.amzn2.0.8
0.6%
Theoretical Threat
Directly Exposed
CVE-2023-32643MEDIUM6.63
glib2
2.56.1-9.amzn2.0.2
fixed in 2.56.1-9.amzn2.0.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2021-3999MEDIUM6.63
glibc
2.26-58.amzn2
fixed in 2.26-61.amzn2
0.7%
Theoretical Threat
Directly Exposed
CVE-2021-3999MEDIUM6.63
glibc-common
2.26-58.amzn2
fixed in 2.26-61.amzn2
0.7%
Theoretical Threat
Directly Exposed
CVE-2021-3999MEDIUM6.63
glibc-langpack-en
2.26-58.amzn2
fixed in 2.26-61.amzn2
0.7%
Theoretical Threat
Directly Exposed
CVE-2021-3999MEDIUM6.63
glibc-minimal-langpack
2.26-58.amzn2
fixed in 2.26-61.amzn2
0.7%
Theoretical Threat
Directly Exposed
CVE-2018-7738MEDIUM6.63
libblkid
2.30.2-2.amzn2.0.7
fixed in 2.30.2-2.amzn2.0.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2021-3999MEDIUM6.63
libcrypt
2.26-58.amzn2
fixed in 2.26-61.amzn2
0.7%
Theoretical Threat
Directly Exposed
CVE-2017-10140MEDIUM6.63
libdb
5.3.21-24.amzn2.0.3
fixed in 5.3.21-24.amzn2.0.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2018-7738MEDIUM6.63
libmount
2.30.2-2.amzn2.0.7
fixed in 2.30.2-2.amzn2.0.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2018-7738MEDIUM6.63
libuuid
2.30.2-2.amzn2.0.7
fixed in 2.30.2-2.amzn2.0.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-49043MEDIUM6.63
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.15
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-7425MEDIUM6.63
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.20
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-13601MEDIUM6.54
glib2
2.56.1-9.amzn2.0.2
fixed in 2.56.1-9.amzn2.0.12
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-24928MEDIUM6.54
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.16
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-25313MEDIUM6.5
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-15.amzn2.0.3
3.3%
Low-Moderate Risk
Directly Exposed
CVE-2023-36054MEDIUM6.5
krb5-libs
1.15.1-37.amzn2.2.4
fixed in 1.15.1-55.amzn2.2.6
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-29824MEDIUM6.5
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.6
3.7%
Low-Moderate Risk
Directly Exposed
CVE-2023-28484MEDIUM6.5
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.8
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-29469MEDIUM6.5
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.8
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2023-34462MEDIUM6.5
io.netty:netty-handler
4.1.72.Final
fixed in 4.1.94.Final
2.5%
Low-Moderate Risk
Directly Exposed
CVE-2023-34462MEDIUM6.5
io.netty:netty-handler
4.1.73.Final
fixed in 4.1.94.Final
2.5%
Low-Moderate Risk
Directly Exposed
CVE-2023-44483MEDIUM6.5
org.apache.santuario:xmlsec
2.2.3
fixed in 2.3.4, 2.2.6, 3.0.3
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-29857MEDIUM6.5
org.bouncycastle:bc-fips
1.0.2.3
fixed in 1.0.2.5
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-29857MEDIUM6.5
org.bouncycastle:bcprov-jdk15on
1.67
fixed in 1.78
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-29857MEDIUM6.5
org.bouncycastle:bcprov-jdk15on
1.70
fixed in 1.78
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-20863MEDIUM6.5
org.springframework:spring-expression
5.2.20.RELEASE
fixed in 6.0.8, 5.3.27, 5.2.24.RELEASE
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-38749MEDIUM6.5
org.yaml:snakeyaml
1.26
fixed in 1.31
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-38751MEDIUM6.5
org.yaml:snakeyaml
1.26
fixed in 1.31
1.5%
Low-Moderate Risk
Directly Exposed
CVE-2022-38752MEDIUM6.5
org.yaml:snakeyaml
1.26
fixed in 1.32
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-41854MEDIUM6.5
org.yaml:snakeyaml
1.26
fixed in 1.32
1.5%
Low-Moderate Risk
Directly Exposed
CVE-2023-32636MEDIUM6.38
glib2
2.56.1-9.amzn2.0.2
fixed in 2.56.1-9.amzn2.0.9
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-29499MEDIUM6.38
glib2
2.56.1-9.amzn2.0.2
fixed in 2.56.1-9.amzn2.0.9
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-37370MEDIUM6.38
krb5-libs
1.15.1-37.amzn2.2.4
fixed in 1.15.1-55.amzn2.2.8
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-27135MEDIUM6.38
libnghttp2
1.41.0-1.amzn2
fixed in 1.41.0-1.amzn2.0.6
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-32414MEDIUM6.38
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.17
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-32415MEDIUM6.38
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.17
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-69421MEDIUM6.38
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.17
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-52999MEDIUM6.38
com.fasterxml.jackson.core:jackson-core
2.12.6
fixed in 2.15.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-52999MEDIUM6.38
com.fasterxml.jackson.core:jackson-core
2.13.2
fixed in 2.15.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-50193MEDIUM6.38
com.fasterxml.jackson.core:jackson-databind
2.12.6
fixed in 2.14.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-50193MEDIUM6.38
com.fasterxml.jackson.core:jackson-databind
2.13.2
fixed in 2.14.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-50193MEDIUM6.38
com.fasterxml.jackson.core:jackson-databind
2.13.2.2
fixed in 2.14.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2022-3509MEDIUM6.38
com.google.protobuf:protobuf-java
3.19.2
fixed in 3.16.3, 3.19.6, 3.20.3, 3.21.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2022-3510MEDIUM6.38
com.google.protobuf:protobuf-java
3.19.2
fixed in 3.16.3, 3.19.6, 3.20.3, 3.21.7
0.5%
Theoretical Threat
Directly Exposed
CVE-2022-3509MEDIUM6.38
com.google.protobuf:protobuf-java
3.19.4
fixed in 3.16.3, 3.19.6, 3.20.3, 3.21.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2022-3510MEDIUM6.38
com.google.protobuf:protobuf-java
3.19.4
fixed in 3.16.3, 3.19.6, 3.20.3, 3.21.7
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-42583MEDIUM6.38
io.netty:netty-codec
4.1.72.Final
fixed in 4.1.133.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59901MEDIUM6.38
io.netty:netty-codec
4.1.72.Final
fixed in 4.1.136.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-58057MEDIUM6.38
io.netty:netty-codec
4.1.72.Final
fixed in 4.1.125.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42583MEDIUM6.38
io.netty:netty-codec
4.1.73.Final
fixed in 4.1.133.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59901MEDIUM6.38
io.netty:netty-codec
4.1.73.Final
fixed in 4.1.136.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-58057MEDIUM6.38
io.netty:netty-codec
4.1.73.Final
fixed in 4.1.125.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-33870MEDIUM6.38
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.1.132.Final, 4.2.10.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42587MEDIUM6.38
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-55831MEDIUM6.38
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-55833MEDIUM6.38
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-56745MEDIUM6.38
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-42585MEDIUM6.38
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-56746MEDIUM6.38
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59899MEDIUM6.38
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-58056MEDIUM6.38
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.1.125.Final, 4.2.5.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-33870MEDIUM6.38
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.1.132.Final, 4.2.10.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42587MEDIUM6.38
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-55831MEDIUM6.38
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-55833MEDIUM6.38
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-56745MEDIUM6.38
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-42585MEDIUM6.38
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-56746MEDIUM6.38
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59899MEDIUM6.38
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-58056MEDIUM6.38
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.1.125.Final, 4.2.5.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42587MEDIUM6.38
io.netty:netty-codec-http2
4.1.72.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-48043MEDIUM6.38
io.netty:netty-codec-http2
4.1.72.Final
fixed in 4.1.135.Final, 4.2.15.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42587MEDIUM6.38
io.netty:netty-codec-http2
4.1.73.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-48043MEDIUM6.38
io.netty:netty-codec-http2
4.1.73.Final
fixed in 4.1.135.Final, 4.2.15.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-45416MEDIUM6.38
io.netty:netty-handler
4.1.72.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-50010MEDIUM6.38
io.netty:netty-handler
4.1.72.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-45416MEDIUM6.38
io.netty:netty-handler
4.1.73.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-50010MEDIUM6.38
io.netty:netty-handler
4.1.73.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42578MEDIUM6.38
io.netty:netty-handler-proxy
4.1.72.Final
fixed in 4.1.133.Final, 4.2.13.Final
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-42578MEDIUM6.38
io.netty:netty-handler-proxy
4.1.73.Final
fixed in 4.1.133.Final, 4.2.13.Final
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-34480MEDIUM6.38
org.apache.logging.log4j:log4j-core
2.17.1
fixed in 2.25.4
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-5588MEDIUM6.38
org.bouncycastle:bcpkix-jdk15on
1.70
fixed in 1.84
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-66566MEDIUM6.38
org.lz4:lz4-java
1.7.1
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-41848MEDIUM6.38
org.springframework:spring-core
5.2.20.RELEASE
fixed in 7.0.8, 6.2.19
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41851MEDIUM6.38
org.springframework:spring-expression
5.2.20.RELEASE
fixed in 7.0.8, 6.2.19
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-36033MEDIUM6.1
org.jsoup:jsoup
1.14.3
fixed in 1.15.3
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2023-2976MEDIUM6.03
com.google.guava:guava
30.0-jre
fixed in 32.0.0-android
0.2%
Theoretical Threat
Directly Exposed
CVE-2023-2976MEDIUM6.03
com.google.guava:guava
30.1-jre
fixed in 32.0.0-android
0.2%
Theoretical Threat
Directly Exposed
CVE-2023-2976MEDIUM6.03
com.google.guava:guava
30.1.1-android
fixed in 32.0.0-android
0.2%
Theoretical Threat
Directly Exposed
CVE-2023-2976MEDIUM6.03
com.google.guava:guava
31.0.1-jre
fixed in 32.0.0-android
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-50602MEDIUM5.9
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-15.amzn2.0.5
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2015-8985MEDIUM5.9
glibc
2.26-58.amzn2
fixed in 2.26-62.amzn2
3.0%
Low-Moderate Risk
Directly Exposed
CVE-2015-8985MEDIUM5.9
glibc-common
2.26-58.amzn2
fixed in 2.26-62.amzn2
3.0%
Low-Moderate Risk
Directly Exposed
CVE-2015-8985MEDIUM5.9
glibc-langpack-en
2.26-58.amzn2
fixed in 2.26-62.amzn2
3.0%
Low-Moderate Risk
Directly Exposed
CVE-2015-8985MEDIUM5.9
glibc-minimal-langpack
2.26-58.amzn2
fixed in 2.26-62.amzn2
3.0%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
krb5-libs
1.15.1-37.amzn2.2.4
fixed in 1.15.1-55.amzn2.2.7
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2015-8985MEDIUM5.9
libcrypt
2.26-58.amzn2
fixed in 2.26-62.amzn2
3.0%
Low-Moderate Risk
Directly Exposed
CVE-2025-13151MEDIUM5.9
libtasn1
4.10-1.amzn2.0.2
fixed in 4.10-1.amzn2.0.8
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-5535MEDIUM5.9
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.13
5.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-56132MEDIUM5.87
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-15.amzn2.0.7
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-56403MEDIUM5.87
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-15.amzn2.0.8
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-56406MEDIUM5.87
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-15.amzn2.0.8
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-56407MEDIUM5.87
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-15.amzn2.0.8
0.1%
Theoretical Threat
Directly Exposed
CVE-2023-38039MEDIUM5.85
curl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.1
62.2%
Actively Exploited
Post-Exploit
CVE-2023-38039MEDIUM5.85
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.1
62.2%
Actively Exploited
Post-Exploit
CVE-2026-35554MEDIUM5.78
org.apache.kafka:kafka-clients
3.0.0
fixed in 3.9.2, 4.0.2, 4.1.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-9230MEDIUM5.6
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.16
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2025-24528MEDIUM5.52
krb5-libs
1.15.1-37.amzn2.2.4
fixed in 1.15.1-55.amzn2.2.9
0.6%
Theoretical Threat
Directly Exposed
CVE-2023-45322MEDIUM5.52
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.13
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-39615MEDIUM5.52
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.11
0.7%
Theoretical Threat
Directly Exposed
CVE-2023-5388MEDIUM5.52
nss-softokn
3.67.0-3.amzn2.0.1
fixed in 3.90.0-6.amzn2.0.1
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-5388MEDIUM5.52
nss-softokn-freebl
3.67.0-3.amzn2.0.1
fixed in 3.90.0-6.amzn2.0.1
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-67735MEDIUM5.52
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.2.8.Final, 4.1.129.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41417MEDIUM5.52
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.1.133.Final, 4.2.13.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42580MEDIUM5.52
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-67735MEDIUM5.52
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.2.8.Final, 4.1.129.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41417MEDIUM5.52
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.1.133.Final, 4.2.13.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42580MEDIUM5.52
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59900MEDIUM5.52
io.netty:netty-codec-http2
4.1.72.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-59900MEDIUM5.52
io.netty:netty-codec-http2
4.1.73.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-12183MEDIUM5.52
org.lz4:lz4-java
1.7.1
fixed in 1.8.1
0.7%
Theoretical Threat
Directly Exposed
CVE-2023-20861MEDIUM5.52
org.springframework:spring-expression
5.2.20.RELEASE
fixed in 6.0.7, 5.3.26, 5.2.23.RELEASE
1.0%
Theoretical Threat
Directly Exposed
CVE-2024-34459MEDIUM5.5
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.14
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-0727MEDIUM5.5
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.12
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2022-24823MEDIUM5.5
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.1.77.Final
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-24823MEDIUM5.5
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.1.77.Final
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-38750MEDIUM5.5
org.yaml:snakeyaml
1.26
fixed in 1.31
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2019-3859MEDIUM5.46
libssh2
1.4.3-12.amzn2.2.3
fixed in 1.4.3-12.amzn2.2.4
6.3%
Low-Moderate Risk
Post-Exploit
CVE-2019-3860MEDIUM5.46
libssh2
1.4.3-12.amzn2.2.3
fixed in 1.4.3-12.amzn2.2.4
5.1%
Low-Moderate Risk
Post-Exploit
CVE-2021-28153MEDIUM5.3
glib2
2.56.1-9.amzn2.0.2
fixed in 2.56.1-9.amzn2.0.7
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2024-33600MEDIUM5.3
glibc
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.3
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-33600MEDIUM5.3
glibc-common
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.3
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-33600MEDIUM5.3
glibc-langpack-en
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.3
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-33600MEDIUM5.3
glibc-minimal-langpack
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.3
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-33600MEDIUM5.3
libcrypt
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.3
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-12133MEDIUM5.3
libtasn1
4.10-1.amzn2.0.2
fixed in 4.10-1.amzn2.0.7
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-0465MEDIUM5.3
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.7
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2023-0466MEDIUM5.3
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.7
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2023-3446MEDIUM5.3
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.9
6.5%
Low-Moderate Risk
Directly Exposed
CVE-2023-3817MEDIUM5.3
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.9
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2023-5678MEDIUM5.3
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.11
4.5%
Low-Moderate Risk
Directly Exposed
CVE-2024-29025MEDIUM5.3
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.1.108.Final
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2024-29025MEDIUM5.3
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.1.108.Final
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2020-13956MEDIUM5.3
org.apache.httpcomponents:httpclient
4.5.10
fixed in 4.5.13, 5.0.3
8.7%
Low-Moderate Risk
Directly Exposed
CVE-2024-31141MEDIUM5.3
org.apache.kafka:kafka-clients
3.0.0
fixed in 3.7.1
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2021-28170MEDIUM5.3
org.glassfish:javax.el
3.0.0
No fix yet
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-22970MEDIUM5.3
org.springframework:spring-beans
5.2.20.RELEASE
fixed in 5.2.22.RELEASE, 5.3.20
2.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-22968MEDIUM5.3
org.springframework:spring-context
5.2.20.RELEASE
fixed in 5.3.19, 5.2.21.RELEASE
5.7%
Low-Moderate Risk
Directly Exposed
CVE-2023-27533MEDIUM5.28
curl
7.79.1-2.amzn2.0.1
fixed in 8.0.1-1.amzn2.0.1
2.0%
Low-Moderate Risk
Post-Exploit
CVE-2023-27534MEDIUM5.28
curl
7.79.1-2.amzn2.0.1
fixed in 8.0.1-1.amzn2.0.1
2.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-27533MEDIUM5.28
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.0.1-1.amzn2.0.1
2.0%
Low-Moderate Risk
Post-Exploit
CVE-2023-27534MEDIUM5.28
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.0.1-1.amzn2.0.1
2.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-1757MEDIUM5.27
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.24
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-1390MEDIUM5.18
libcap
2.54-1.amzn2.0.1
fixed in 2.54-1.amzn2.0.3
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-6766MEDIUM5.18
nss
3.67.0-4.amzn2.0.2
fixed in 3.90.0-2.amzn2.0.3
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6767MEDIUM5.18
nss
3.67.0-4.amzn2.0.2
fixed in 3.90.0-2.amzn2.0.3
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-6772MEDIUM5.18
nss
3.67.0-4.amzn2.0.2
fixed in 3.90.0-2.amzn2.0.3
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6766MEDIUM5.18
nss-sysinit
3.67.0-4.amzn2.0.2
fixed in 3.90.0-2.amzn2.0.3
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6767MEDIUM5.18
nss-sysinit
3.67.0-4.amzn2.0.2
fixed in 3.90.0-2.amzn2.0.3
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-6772MEDIUM5.18
nss-sysinit
3.67.0-4.amzn2.0.2
fixed in 3.90.0-2.amzn2.0.3
0.3%
Theoretical Threat
Directly Exposed
CVE-2022-43551MEDIUM5.17
curl
7.79.1-2.amzn2.0.1
fixed in 7.87.0-2.amzn2.0.1
16.5%
High Exploitation Risk
Post-Exploit
CVE-2024-2398MEDIUM5.17
curl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.7
36.1%
High Exploitation Risk
Post-Exploit
CVE-2022-43551MEDIUM5.17
libcurl
7.79.1-2.amzn2.0.1
fixed in 7.87.0-2.amzn2.0.1
16.5%
High Exploitation Risk
Post-Exploit
CVE-2024-2398MEDIUM5.17
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.7
36.1%
High Exploitation Risk
Post-Exploit
CVE-2023-24329MEDIUM5.17
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.6
20.5%
High Exploitation Risk
Post-Exploit
CVE-2023-24329MEDIUM5.17
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.6
20.5%
High Exploitation Risk
Post-Exploit
CVE-2022-35737MEDIUM5.17
sqlite
3.7.17-8.amzn2.1.1
fixed in 3.7.17-8.amzn2.1.2
18.0%
High Exploitation Risk
Post-Exploit
CVE-2024-26458MEDIUM5.02
krb5-libs
1.15.1-37.amzn2.2.4
fixed in 1.15.1-55.amzn2.2.7
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
krb5-libs
1.15.1-37.amzn2.2.4
fixed in 1.15.1-55.amzn2.2.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-0990MEDIUM5.02
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.22
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-69420MEDIUM5.02
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.17
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-22796MEDIUM5.02
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.17
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-9076MEDIUM5.02
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.21
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-34477MEDIUM5.02
org.apache.logging.log4j:log4j-core
2.17.1
fixed in 2.25.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-30171MEDIUM5.02
org.bouncycastle:bcprov-jdk15on
1.67
fixed in 1.78
0.9%
Theoretical Threat
Directly Exposed
CVE-2024-30171MEDIUM5.02
org.bouncycastle:bcprov-jdk15on
1.70
fixed in 1.78
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-41849MEDIUM5.02
org.springframework:spring-expression
5.2.20.RELEASE
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41850MEDIUM5.02
org.springframework:spring-expression
5.2.20.RELEASE
fixed in 7.0.8, 6.2.19
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-38808MEDIUM5.02
org.springframework:spring-expression
5.2.20.RELEASE
fixed in 5.3.39
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-34180MEDIUM5
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.21
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-42915MEDIUM4.86
curl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-7.amzn2.0.1
2.9%
Low-Moderate Risk
Post-Exploit
CVE-2022-42915MEDIUM4.86
libcurl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-7.amzn2.0.1
2.9%
Low-Moderate Risk
Post-Exploit
CVE-2026-59921MEDIUM4.84
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-59921MEDIUM4.84
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2007-4559MEDIUM4.69
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.12
27.1%
High Exploitation Risk
Post-Exploit
CVE-2007-4559MEDIUM4.69
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.12
27.1%
High Exploitation Risk
Post-Exploit
CVE-2021-38185MEDIUM4.68
cpio
2.11-28.amzn2
fixed in 2.12-11.amzn2
4.1%
Low-Moderate Risk
Post-Exploit
CVE-2022-1616MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
2.7%
Low-Moderate Risk
Post-Exploit
CVE-2022-1619MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2022-1621MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
2.4%
Low-Moderate Risk
Post-Exploit
CVE-2022-1629MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.9%
Low-Moderate Risk
Post-Exploit
CVE-2022-1720MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2022-1735MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-1796MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2022-1851MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2022-1886MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-1897MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.5%
Low-Moderate Risk
Post-Exploit
CVE-2022-1898MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2022-1927MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2022-1942MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2022-1968MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2022-2000MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.5%
Low-Moderate Risk
Post-Exploit
CVE-2022-2042MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2022-2124MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.5%
Low-Moderate Risk
Post-Exploit
CVE-2022-2125MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2022-2126MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.5%
Low-Moderate Risk
Post-Exploit
CVE-2022-2129MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2022-2175MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-2182MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.5%
Low-Moderate Risk
Post-Exploit
CVE-2022-2183MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.5%
Low-Moderate Risk
Post-Exploit
CVE-2022-2206MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-2207MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2022-2210MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-2257MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2022-2264MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2022-2284MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2022-2285MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2022-2286MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-2288MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2022-2289MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-2304MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2022-2343MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-2344MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2022-2345MEDIUM4.68
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2020-21047MEDIUM4.67
elfutils-libelf
0.176-2.amzn2
fixed in 0.176-2.amzn2.0.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2021-33294MEDIUM4.67
elfutils-libelf
0.176-2.amzn2
fixed in 0.176-2.amzn2.0.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2021-3800MEDIUM4.67
glib2
2.56.1-9.amzn2.0.2
fixed in 2.56.1-9.amzn2.0.5
0.5%
Theoretical Threat
Directly Exposed
CVE-2023-32611MEDIUM4.67
glib2
2.56.1-9.amzn2.0.2
fixed in 2.56.1-9.amzn2.0.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2023-32665MEDIUM4.67
glib2
2.56.1-9.amzn2.0.2
fixed in 2.56.1-9.amzn2.0.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-0395MEDIUM4.67
glibc
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.4
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-0395MEDIUM4.67
glibc-common
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.4
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-0395MEDIUM4.67
glibc-langpack-en
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.4
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-0395MEDIUM4.67
glibc-minimal-langpack
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.4
0.3%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libblkid
2.30.2-2.amzn2.0.7
fixed in 2.30.2-2.amzn2.0.10
0.4%
Theoretical Threat
Directly Exposed
CVE-2021-37600MEDIUM4.67
libblkid
2.30.2-2.amzn2.0.7
fixed in 2.30.2-2.amzn2.0.11
0.7%
Theoretical Threat
Directly Exposed
CVE-2025-0395MEDIUM4.67
libcrypt
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.4
0.3%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libmount
2.30.2-2.amzn2.0.7
fixed in 2.30.2-2.amzn2.0.10
0.4%
Theoretical Threat
Directly Exposed
CVE-2021-37600MEDIUM4.67
libmount
2.30.2-2.amzn2.0.7
fixed in 2.30.2-2.amzn2.0.11
0.7%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libuuid
2.30.2-2.amzn2.0.7
fixed in 2.30.2-2.amzn2.0.10
0.4%
Theoretical Threat
Directly Exposed
CVE-2021-37600MEDIUM4.67
libuuid
2.30.2-2.amzn2.0.7
fixed in 2.30.2-2.amzn2.0.11
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-7383MEDIUM4.67
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.21
0.6%
Theoretical Threat
Directly Exposed
CVE-2024-47535MEDIUM4.67
io.netty:netty-common
4.1.72.Final
fixed in 4.1.115.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-25193MEDIUM4.67
io.netty:netty-common
4.1.72.Final
fixed in 4.1.118.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-47535MEDIUM4.67
io.netty:netty-common
4.1.73.Final
fixed in 4.1.115.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-25193MEDIUM4.67
io.netty:netty-common
4.1.73.Final
fixed in 4.1.118.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-45146MEDIUM4.67
org.bouncycastle:bc-fips
1.0.2.3
fixed in 1.0.2.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2023-33202MEDIUM4.67
org.bouncycastle:bcprov-jdk15on
1.67
fixed in 1.70
0.9%
Theoretical Threat
Directly Exposed
CVE-2023-23914MEDIUM4.64
curl
7.79.1-2.amzn2.0.1
fixed in 7.88.0-1.amzn2.0.1
0.9%
Theoretical Threat
Post-Exploit
CVE-2023-23914MEDIUM4.64
libcurl
7.79.1-2.amzn2.0.1
fixed in 7.88.0-1.amzn2.0.1
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-7598MEDIUM4.64
libssh2
1.4.3-12.amzn2.2.3
fixed in 1.4.3-12.amzn2.2.7
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-38545MEDIUM4.58
curl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.4
78.5%
Actively Exploited
Post-Exploit
CVE-2023-38545MEDIUM4.58
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.4
78.5%
Actively Exploited
Post-Exploit
CVE-2022-42889MEDIUM4.58
org.apache.commons:commons-text
1.9
fixed in 1.10.0
99.9%
Actively Exploited
Post-Exploit
CVE-2022-1471MEDIUM4.58
org.yaml:snakeyaml
1.26
fixed in 2.0
99.6%
Actively Exploited
Post-Exploit
CVE-2022-27781MEDIUM4.5
curl
7.79.1-2.amzn2.0.1
fixed in 7.87.0-2.amzn2.0.1
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2022-27782MEDIUM4.5
curl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-4.amzn2.0.1
2.8%
Low-Moderate Risk
Post-Exploit
CVE-2022-42916MEDIUM4.5
curl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-7.amzn2.0.1
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2023-28319MEDIUM4.5
curl
7.79.1-2.amzn2.0.1
fixed in 8.2.1-1.amzn2.0.2
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2022-27781MEDIUM4.5
libcurl
7.79.1-2.amzn2.0.1
fixed in 7.87.0-2.amzn2.0.1
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2022-27782MEDIUM4.5
libcurl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-4.amzn2.0.1
2.8%
Low-Moderate Risk
Post-Exploit
CVE-2022-42916MEDIUM4.5
libcurl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-7.amzn2.0.1
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2023-28319MEDIUM4.5
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.2.1-1.amzn2.0.2
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2022-45061MEDIUM4.5
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.6
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2024-7592MEDIUM4.5
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.11
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-45061MEDIUM4.5
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.6
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2024-7592MEDIUM4.5
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.11
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2019-9923MEDIUM4.5
tar
2:1.26-35.amzn2
fixed in 2:1.26-35.amzn2.0.2
3.0%
Low-Moderate Risk
Post-Exploit
CVE-2022-1620MEDIUM4.5
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2022-3705MEDIUM4.5
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.828-1.amzn2.0.1
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-5344MEDIUM4.5
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.2
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-4046MEDIUM4.5
glibc
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
glibc-common
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
glibc-langpack-en
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
glibc-minimal-langpack
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libcrypt
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42766MEDIUM4.5
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.21
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-54514MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.12.6
fixed in 2.18.8, 2.21.4, 3.1.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54515MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.12.6
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54514MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.13.2
fixed in 2.18.8, 2.21.4, 3.1.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54515MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.13.2
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54514MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.13.2.2
fixed in 2.18.8, 2.21.4, 3.1.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54515MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.13.2.2
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-51074MEDIUM4.5
com.jayway.jsonpath:json-path
2.4.0
fixed in 2.9.0
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-50020MEDIUM4.5
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-59898MEDIUM4.5
io.netty:netty-codec-http
4.1.72.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-50020MEDIUM4.5
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-59898MEDIUM4.5
io.netty:netty-codec-http
4.1.73.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-47244MEDIUM4.5
io.netty:netty-codec-http2
4.1.72.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-50560MEDIUM4.5
io.netty:netty-codec-http2
4.1.72.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-47244MEDIUM4.5
io.netty:netty-codec-http2
4.1.73.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-50560MEDIUM4.5
io.netty:netty-codec-http2
4.1.73.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-8885MEDIUM4.5
org.bouncycastle:bc-fips
1.0.2.3
fixed in 1.0.2.6, 2.0.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-8916MEDIUM4.5
org.bouncycastle:bcpkix-jdk15on
1.70
fixed in 1.79
0.5%
Theoretical Threat
Directly Exposed
CVE-2023-33201MEDIUM4.5
org.bouncycastle:bcprov-jdk15on
1.67
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-34447MEDIUM4.5
org.bouncycastle:bcprov-jdk15on
1.67
fixed in 1.78
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-33201MEDIUM4.5
org.bouncycastle:bcprov-jdk15on
1.70
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-34447MEDIUM4.5
org.bouncycastle:bcprov-jdk15on
1.70
fixed in 1.78
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-38820MEDIUM4.5
org.springframework:spring-context
5.2.20.RELEASE
fixed in 6.1.14
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-41852MEDIUM4.5
org.springframework:spring-expression
5.2.20.RELEASE
fixed in 7.0.8, 6.2.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2023-0767MEDIUM4.49
nss-tools
3.67.0-4.amzn2.0.2
fixed in 3.79.0-4.amzn2.0.1
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-47162MEDIUM4.49
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.7
0.2%
Theoretical Threat
Post-Exploit
CVE-2022-32206MEDIUM4.48
curl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-6.amzn2.0.1
32.2%
High Exploitation Risk
Post-Exploit
CVE-2022-32206MEDIUM4.48
libcurl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-6.amzn2.0.1
32.2%
High Exploitation Risk
Post-Exploit
CVE-2023-7104MEDIUM4.38
nss-tools
3.67.0-4.amzn2.0.2
fixed in 3.90.0-2.amzn2.0.2
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2024-47554MEDIUM4.3
commons-io:commons-io
2.11.0
fixed in 2.14.0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-47554MEDIUM4.3
commons-io:commons-io
2.7
fixed in 2.14.0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2022-2287MEDIUM4.26
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-11850MEDIUM4.25
krb5-libs
1.15.1-37.amzn2.2.4
fixed in 1.15.1-55.amzn2.2.10
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-34982MEDIUM4.18
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.5
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-15079MEDIUM4.13
curl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.12
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-15079MEDIUM4.13
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.12
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-6100MEDIUM4.13
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.19
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-6100MEDIUM4.13
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.19
0.6%
Theoretical Threat
Post-Exploit
CVE-2024-2961MEDIUM4.12
glibc
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.1
88.3%
Actively Exploited
Post-Exploit
CVE-2024-2961MEDIUM4.12
glibc-common
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.1
88.3%
Actively Exploited
Post-Exploit
CVE-2024-2961MEDIUM4.12
glibc-langpack-en
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.1
88.3%
Actively Exploited
Post-Exploit
CVE-2024-2961MEDIUM4.12
glibc-minimal-langpack
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.1
88.3%
Actively Exploited
Post-Exploit
CVE-2024-2961MEDIUM4.12
libcrypt
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.1
88.3%
Actively Exploited
Post-Exploit
CVE-2025-0938MEDIUM4.08
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.11
1.5%
Low-Moderate Risk
Post-Exploit
CVE-2025-0938MEDIUM4.08
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.11
1.5%
Low-Moderate Risk
Post-Exploit
CVE-2023-4039MEDIUM4.08
libgcc
7.3.1-15.amzn2
fixed in 7.3.1-17.amzn2
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-4039MEDIUM4.08
libstdc++
7.3.1-15.amzn2
fixed in 7.3.1-17.amzn2
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-48795MEDIUM4.08
org.apache.cxf:cxf-core
3.4.5
fixed in 3.5.11, 3.6.6, 4.0.7, 4.1.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-68161MEDIUM4.08
org.apache.logging.log4j:log4j-core
2.17.1
fixed in 2.25.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2022-37434MEDIUM4.06
zlib
1.2.7-19.amzn2.0.1
fixed in 1.2.7-19.amzn2.0.2
15.5%
High Exploitation Risk
Post-Exploit
CVE-2025-68160MEDIUM4
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.17
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-13176MEDIUM4
openssl-libs
1:1.0.2k-24.amzn2.0.3
fixed in 1:1.0.2k-24.amzn2.0.15
0.6%
Theoretical Threat
Directly Exposed
CVE-2017-10140LOW3.98
libdb-utils
5.3.21-24.amzn2.0.3
fixed in 5.3.21-24.amzn2.0.4
0.6%
Theoretical Threat
Post-Exploit
CVE-2022-1733LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
0.6%
Theoretical Threat
Post-Exploit
CVE-2022-1769LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-1785LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-2522LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.6%
Theoretical Threat
Post-Exploit
CVE-2022-2571LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-2580LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-2581LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-2816LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-2817LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-2819LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.6%
Theoretical Threat
Post-Exploit
CVE-2022-2845LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-2849LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-2862LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.7%
Theoretical Threat
Post-Exploit
CVE-2022-2889LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-2946LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-2982LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.8%
Theoretical Threat
Post-Exploit
CVE-2022-3016LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-3037LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-3099LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-3134LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-3234LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-3235LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-3256LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-3296LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-3297LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-3324LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-3352LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-3491LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-3591LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.828-1.amzn2.0.1
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-4141LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1006-1.amzn2.0.1
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-4292LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1160-1.amzn2.0.1
0.7%
Theoretical Threat
Post-Exploit
CVE-2022-47024LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.3%
Theoretical Threat
Post-Exploit
CVE-2023-0049LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1160-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-0051LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-0054LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-0288LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-0433LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.6%
Theoretical Threat
Post-Exploit
CVE-2023-0512LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-2610LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1592-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-4733LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-4734LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.6%
Theoretical Threat
Post-Exploit
CVE-2023-4735LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.6%
Theoretical Threat
Post-Exploit
CVE-2023-4738LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.6%
Theoretical Threat
Post-Exploit
CVE-2023-4750LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-4751LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.6%
Theoretical Threat
Post-Exploit
CVE-2023-4752LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.6%
Theoretical Threat
Post-Exploit
CVE-2023-4781LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-52858LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.7
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-52860LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.7
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-55693LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.8
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-55895LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.8
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-57456LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.8
0.1%
Theoretical Threat
Post-Exploit
CVE-2024-22667LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.1
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-1215LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-1127LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1367-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-5535LOW3.98
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.3
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-35260LOW3.9
curl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-7.amzn2.0.1
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2023-23916LOW3.9
curl
7.79.1-2.amzn2.0.1
fixed in 7.88.0-1.amzn2.0.1
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2023-46218LOW3.9
curl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.6
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2024-9681LOW3.9
curl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.8
2.0%
Low-Moderate Risk
Post-Exploit
CVE-2022-34903LOW3.9
gnupg2
2.0.22-5.amzn2.0.4
fixed in 2.0.22-5.amzn2.0.5
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2022-35260LOW3.9
libcurl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-7.amzn2.0.1
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2023-23916LOW3.9
libcurl
7.79.1-2.amzn2.0.1
fixed in 7.88.0-1.amzn2.0.1
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2023-46218LOW3.9
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.6
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2024-9681LOW3.9
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.8
2.0%
Low-Moderate Risk
Post-Exploit
CVE-2020-22218LOW3.82
libssh2
1.4.3-12.amzn2.2.3
fixed in 1.4.3-12.amzn2.2.6
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-58050LOW3.82
libssh2
1.4.3-12.amzn2.2.3
fixed in 1.4.3-12.amzn2.2.8
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-8194LOW3.82
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.14
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-3644LOW3.82
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.17
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-4224LOW3.82
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.17
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-8194LOW3.82
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.14
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-3644LOW3.82
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.17
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-4224LOW3.82
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.17
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-41411LOW3.72
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.6
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-48924LOW3.7
org.apache.commons:commons-lang3
3.10
fixed in 3.18.0
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2025-48924LOW3.7
org.apache.commons:commons-lang3
3.12.0
fixed in 3.18.0
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2025-48924LOW3.7
org.apache.commons:commons-lang3
3.4
fixed in 3.18.0
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2025-48924LOW3.7
org.apache.commons:commons-lang3
3.9
fixed in 3.18.0
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2023-6135LOW3.65
nss-softokn
3.67.0-3.amzn2.0.1
fixed in 3.90.0-6.amzn2.0.2
0.7%
Theoretical Threat
Directly Exposed
CVE-2023-6135LOW3.65
nss-softokn-freebl
3.67.0-3.amzn2.0.1
fixed in 3.90.0-6.amzn2.0.2
0.7%
Theoretical Threat
Directly Exposed
CVE-2023-4156LOW3.62
gawk
4.0.2-4.amzn2.1.2
fixed in 4.0.2-4.amzn2.1.3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-4786LOW3.62
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.19
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-4786LOW3.62
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.19
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-6965LOW3.61
sqlite
3.7.17-8.amzn2.1.1
fixed in 3.7.17-8.amzn2.1.3
74.4%
Actively Exploited
Post-Exploit
CVE-2025-68973LOW3.57
gnupg2
2.0.22-5.amzn2.0.4
fixed in 2.0.22-5.amzn2.0.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-8058LOW3.57
glibc
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-8058LOW3.57
glibc-common
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-8058LOW3.57
glibc-langpack-en
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-8058LOW3.57
glibc-minimal-langpack
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-8058LOW3.57
libcrypt
2.26-58.amzn2
fixed in 2.26-64.amzn2.0.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2022-32208LOW3.54
curl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-6.amzn2.0.1
6.8%
Low-Moderate Risk
Post-Exploit
CVE-2022-43552LOW3.54
curl
7.79.1-2.amzn2.0.1
fixed in 7.87.0-2.amzn2.0.1
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2023-27535LOW3.54
curl
7.79.1-2.amzn2.0.1
fixed in 8.0.1-1.amzn2.0.1
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2023-27536LOW3.54
curl
7.79.1-2.amzn2.0.1
fixed in 8.0.1-1.amzn2.0.1
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2023-27537LOW3.54
curl
7.79.1-2.amzn2.0.1
fixed in 8.0.1-1.amzn2.0.1
1.9%
Low-Moderate Risk
Post-Exploit
CVE-2023-28321LOW3.54
curl
7.79.1-2.amzn2.0.1
fixed in 8.2.1-1.amzn2.0.2
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2022-32208LOW3.54
libcurl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-6.amzn2.0.1
6.8%
Low-Moderate Risk
Post-Exploit
CVE-2022-43552LOW3.54
libcurl
7.79.1-2.amzn2.0.1
fixed in 7.87.0-2.amzn2.0.1
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2023-27535LOW3.54
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.0.1-1.amzn2.0.1
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2023-27536LOW3.54
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.0.1-1.amzn2.0.1
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2023-27537LOW3.54
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.0.1-1.amzn2.0.1
1.9%
Low-Moderate Risk
Post-Exploit
CVE-2023-28321LOW3.54
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.2.1-1.amzn2.0.2
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2022-48566LOW3.54
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.8
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2022-48566LOW3.54
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.8
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2022-32207LOW3.53
curl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-6.amzn2.0.1
6.9%
Low-Moderate Risk
Post-Exploit
CVE-2022-32221LOW3.53
curl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-7.amzn2.0.1
4.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-22822LOW3.53
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-14.amzn2.0.1
4.8%
Low-Moderate Risk
Post-Exploit
CVE-2022-22823LOW3.53
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-14.amzn2.0.1
3.4%
Low-Moderate Risk
Post-Exploit
CVE-2022-22824LOW3.53
expat
2.1.0-12.amzn2.0.4
fixed in 2.1.0-14.amzn2.0.1
3.4%
Low-Moderate Risk
Post-Exploit
CVE-2018-16428LOW3.53
glib2
2.56.1-9.amzn2.0.2
fixed in 2.56.1-9.amzn2.0.3
4.7%
Low-Moderate Risk
Post-Exploit
CVE-2015-8390LOW3.53
glib2
2.56.1-9.amzn2.0.2
fixed in 2.56.1-9.amzn2.0.6
4.6%
Low-Moderate Risk
Post-Exploit
CVE-2015-8394LOW3.53
glib2
2.56.1-9.amzn2.0.2
fixed in 2.56.1-9.amzn2.0.6
4.8%
Low-Moderate Risk
Post-Exploit
CVE-2022-32207LOW3.53
libcurl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-6.amzn2.0.1
6.9%
Low-Moderate Risk
Post-Exploit
CVE-2022-32221LOW3.53
libcurl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-7.amzn2.0.1
4.3%
Low-Moderate Risk
Post-Exploit
CVE-2024-56171LOW3.53
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.16
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2015-8390LOW3.53
pcre
8.32-17.amzn2.0.2
fixed in 8.32-17.amzn2.0.3
4.6%
Low-Moderate Risk
Post-Exploit
CVE-2015-8394LOW3.53
pcre
8.32-17.amzn2.0.2
fixed in 8.32-17.amzn2.0.3
4.8%
Low-Moderate Risk
Post-Exploit
CVE-2022-48565LOW3.53
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.7
4.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-48565LOW3.53
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.7
4.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-3520LOW3.53
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.828-1.amzn2.0.1
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2023-45853LOW3.53
zlib
1.2.7-19.amzn2.0.1
fixed in 1.2.7-19.amzn2.0.3
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2022-46364LOW3.53
org.apache.cxf:cxf-core
3.4.5
fixed in 3.4.10, 3.5.5
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2023-32697LOW3.53
org.xerial:sqlite-jdbc
3.32.3.2
fixed in 3.41.2.2
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2025-14819LOW3.47
curl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.12
0.7%
Theoretical Threat
Post-Exploit
CVE-2025-14819LOW3.47
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.12
0.7%
Theoretical Threat
Post-Exploit
CVE-2024-6923LOW3.47
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.11
0.8%
Theoretical Threat
Post-Exploit
CVE-2024-6923LOW3.47
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.11
0.8%
Theoretical Threat
Post-Exploit
CVE-2025-49128LOW3.4
com.fasterxml.jackson.core:jackson-core
2.12.6
fixed in 2.13.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-1170LOW3.37
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1403-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-1175LOW3.37
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1403-1.amzn2.0.1
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-23915LOW3.31
curl
7.79.1-2.amzn2.0.1
fixed in 7.88.0-1.amzn2.0.1
0.9%
Theoretical Threat
Post-Exploit
CVE-2025-11563LOW3.31
curl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.11
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-14524LOW3.31
curl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.12
0.6%
Theoretical Threat
Post-Exploit
CVE-2023-23915LOW3.31
libcurl
7.79.1-2.amzn2.0.1
fixed in 7.88.0-1.amzn2.0.1
0.9%
Theoretical Threat
Post-Exploit
CVE-2025-11563LOW3.31
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.11
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-14524LOW3.31
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.12
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-58051LOW3.31
libssh2
1.4.3-12.amzn2.2.3
fixed in 1.4.3-12.amzn2.2.8
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-11972LOW3.31
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.21
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-11972LOW3.31
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.21
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-27538LOW3.3
curl
7.79.1-2.amzn2.0.1
fixed in 8.0.1-1.amzn2.0.1
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2023-27538LOW3.3
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.0.1-1.amzn2.0.1
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-48303LOW3.3
tar
2:1.26-35.amzn2
fixed in 2:1.26-35.amzn2.0.1
4.5%
Low-Moderate Risk
Post-Exploit
CVE-2022-1674LOW3.3
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2022-1771LOW3.3
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2022-2208LOW3.3
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-2231LOW3.3
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2024-2004LOW3.18
curl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.7
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2025-9086LOW3.18
curl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.10
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2023-46219LOW3.18
curl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.5
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2024-2004LOW3.18
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.7
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2025-9086LOW3.18
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.10
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2023-46219LOW3.18
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.5
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2023-27043LOW3.18
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.9
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2023-27043LOW3.18
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.9
2.5%
Low-Moderate Risk
Post-Exploit
CVE-2024-0450LOW3.16
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.11
0.3%
Theoretical Threat
Post-Exploit
CVE-2024-0450LOW3.16
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.11
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-0989LOW3.15
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.23
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6766LOW3.11
nss-tools
3.67.0-4.amzn2.0.2
fixed in 3.90.0-2.amzn2.0.3
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-6767LOW3.11
nss-tools
3.67.0-4.amzn2.0.2
fixed in 3.90.0-2.amzn2.0.3
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-6772LOW3.11
nss-tools
3.67.0-4.amzn2.0.2
fixed in 3.90.0-2.amzn2.0.3
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-6019LOW3.11
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-6019LOW3.11
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-10966LOW3.01
curl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.12
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-10966LOW3.01
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.12
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-32205LOW2.97
curl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-6.amzn2.0.1
27.1%
High Exploitation Risk
Post-Exploit
CVE-2022-32205LOW2.97
libcurl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-6.amzn2.0.1
27.1%
High Exploitation Risk
Post-Exploit
CVE-2025-6075LOW2.8
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.16
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-6075LOW2.8
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.16
0.1%
Theoretical Threat
Post-Exploit
CVE-2023-4641LOW2.8
shadow-utils
2:4.1.5.1-24.amzn2.0.2
fixed in 2:4.1.5.1-24.amzn2.0.3
0.3%
Theoretical Threat
Post-Exploit
CVE-2021-3236LOW2.8
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.3%
Theoretical Threat
Post-Exploit
CVE-2022-1725LOW2.8
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-2874LOW2.8
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-2923LOW2.8
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-2980LOW2.8
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.7%
Theoretical Threat
Post-Exploit
CVE-2022-3153LOW2.8
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2022-3278LOW2.8
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.9%
Theoretical Threat
Post-Exploit
CVE-2023-2609LOW2.8
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1592-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-1264LOW2.8
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1403-1.amzn2.0.1
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-1355LOW2.8
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1403-1.amzn2.0.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-46246LOW2.8
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2081-1.amzn2.0.1
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-24014LOW2.8
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.3
0.3%
Theoretical Threat
Post-Exploit
CVE-2023-5441LOW2.8
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.3
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-2602LOW2.8
libcap
2.54-1.amzn2.0.1
fixed in 2.54-1.amzn2.0.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2021-36084LOW2.8
libsepol
2.5-8.1.amzn2.0.2
fixed in 2.5-10.amzn2.0.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2021-36085LOW2.8
libsepol
2.5-8.1.amzn2.0.2
fixed in 2.5-10.amzn2.0.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2021-36086LOW2.8
libsepol
2.5-8.1.amzn2.0.2
fixed in 2.5-10.amzn2.0.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2021-36087LOW2.8
libsepol
2.5-8.1.amzn2.0.2
fixed in 2.5-10.amzn2.0.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-8732LOW2.8
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.21
0.2%
Theoretical Threat
Directly Exposed
CVE-2020-8908LOW2.8
com.google.guava:guava
30.0-jre
fixed in 32.0.0-android
1.0%
Theoretical Threat
Directly Exposed
CVE-2020-8908LOW2.8
com.google.guava:guava
30.1-jre
fixed in 32.0.0-android
1.0%
Theoretical Threat
Directly Exposed
CVE-2020-8908LOW2.8
com.google.guava:guava
30.1.1-android
fixed in 32.0.0-android
1.0%
Theoretical Threat
Directly Exposed
CVE-2020-8908LOW2.8
com.google.guava:guava
31.0.1-jre
fixed in 32.0.0-android
1.0%
Theoretical Threat
Directly Exposed
CVE-2023-40217LOW2.7
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.12
0.8%
Theoretical Threat
Post-Exploit
CVE-2025-12084LOW2.7
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.15
0.7%
Theoretical Threat
Post-Exploit
CVE-2023-40217LOW2.7
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.12
0.8%
Theoretical Threat
Post-Exploit
CVE-2025-12084LOW2.7
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.15
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-47167LOW2.7
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.7
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-0992LOW2.46
libxml2
2.9.1-6.amzn2.5.4
fixed in 2.9.1-6.amzn2.5.22
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-14017LOW2.45
curl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.12
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-14017LOW2.45
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.12
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-15282LOW2.45
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.16
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-0672LOW2.45
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.16
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-15282LOW2.45
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.16
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-0672LOW2.45
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.16
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-15224LOW2.4
curl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.12
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-15224LOW2.4
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.12
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-48706LOW2.4
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.1
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-11468LOW2.29
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.16
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-0865LOW2.29
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.16
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-11468LOW2.29
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.16
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-0865LOW2.29
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.16
0.5%
Theoretical Threat
Post-Exploit
CVE-2024-43802LOW2.29
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-29768LOW2.24
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.4
0.3%
Theoretical Threat
Post-Exploit
CVE-2023-38546LOW2.22
curl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.4
6.2%
Low-Moderate Risk
Post-Exploit
CVE-2022-35252LOW2.22
curl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-6.amzn2.0.1
1.9%
Low-Moderate Risk
Post-Exploit
CVE-2023-28322LOW2.22
curl
7.79.1-2.amzn2.0.1
fixed in 8.2.1-1.amzn2.0.2
2.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-38546LOW2.22
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.3.0-1.amzn2.0.4
6.2%
Low-Moderate Risk
Post-Exploit
CVE-2022-35252LOW2.22
libcurl
7.79.1-2.amzn2.0.1
fixed in 7.79.1-6.amzn2.0.1
1.9%
Low-Moderate Risk
Post-Exploit
CVE-2023-28322LOW2.22
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.2.1-1.amzn2.0.2
2.2%
Low-Moderate Risk
Post-Exploit
CVE-2025-6069LOW2.19
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.13
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-6069LOW2.19
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.13
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-48231LOW2.19
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2120-1.amzn2.0.1
0.7%
Theoretical Threat
Post-Exploit
CVE-2023-48232LOW2.19
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2120-1.amzn2.0.1
0.7%
Theoretical Threat
Post-Exploit
CVE-2023-48233LOW2.19
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2120-1.amzn2.0.1
0.7%
Theoretical Threat
Post-Exploit
CVE-2023-48234LOW2.19
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2120-1.amzn2.0.1
0.7%
Theoretical Threat
Post-Exploit
CVE-2023-48235LOW2.19
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2120-1.amzn2.0.1
0.7%
Theoretical Threat
Post-Exploit
CVE-2023-48236LOW2.19
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2120-1.amzn2.0.1
0.7%
Theoretical Threat
Post-Exploit
CVE-2023-48237LOW2.19
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2120-1.amzn2.0.1
0.7%
Theoretical Threat
Post-Exploit
CVE-2025-26603LOW2.14
vim-minimal
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2024-11168LOW1.89
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.11
0.7%
Theoretical Threat
Post-Exploit
CVE-2024-11168LOW1.89
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.11
0.7%
Theoretical Threat
Post-Exploit
CVE-2020-19909LOW1.68
curl
7.79.1-2.amzn2.0.1
fixed in 8.2.1-1.amzn2.0.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2020-19909LOW1.68
libcurl
7.79.1-2.amzn2.0.1
fixed in 8.2.1-1.amzn2.0.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-13462LOW1.68
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.18
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-4519LOW1.68
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.18
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-3479LOW1.68
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.18
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-13462LOW1.68
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.18
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-4519LOW1.68
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.18
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-3479LOW1.68
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.18
0.2%
Theoretical Threat
Post-Exploit
CVE-2023-39804LOW1.68
tar
2:1.26-35.amzn2
fixed in 2:1.26-35.amzn2.0.3
0.3%
Theoretical Threat
Post-Exploit
CVE-2024-5642LOW1.38
python
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.10
0.7%
Theoretical Threat
Post-Exploit
CVE-2024-5642LOW1.38
python-libs
2.7.18-1.amzn2.0.5
fixed in 2.7.18-1.amzn2.0.10
0.7%
Theoretical Threat
Post-Exploit
CVE-2015-1197LOW1.14
cpio
2.11-28.amzn2
fixed in 2.12-11.amzn2.0.1
2.9%
Low-Moderate Risk
Post-Exploit
CVE-2023-37920NONE0
ca-certificates
2021.2.50-72.amzn2.0.3
fixed in 2021.2.50-72.amzn2.0.8
0.6%
Theoretical Threat
Not Applicable
CVE-2022-3520NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.828-1.amzn2.0.1
1.0%
Low-Moderate Risk
Not Applicable
CVE-2021-39537NONE0
ncurses
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.4
3.2%
Low-Moderate Risk
Not Applicable
CVE-2021-39537NONE0
ncurses-base
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.4
3.2%
Low-Moderate Risk
Not Applicable
CVE-2021-39537NONE0
ncurses-libs
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.4
3.2%
Low-Moderate Risk
Not Applicable
CVE-2026-47162NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.7
0.2%
Theoretical Threat
Not Applicable
CVE-2026-34982NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.5
0.5%
Theoretical Threat
Not Applicable
CVE-2023-29491NONE0
ncurses
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.5
0.9%
Theoretical Threat
Not Applicable
CVE-2023-29491NONE0
ncurses-base
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.5
0.9%
Theoretical Threat
Not Applicable
CVE-2023-29491NONE0
ncurses-libs
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.5
0.9%
Theoretical Threat
Not Applicable
CVE-2022-1616NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
2.7%
Low-Moderate Risk
Not Applicable
CVE-2022-1619NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
2.6%
Low-Moderate Risk
Not Applicable
CVE-2022-1621NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
2.4%
Low-Moderate Risk
Not Applicable
CVE-2022-1629NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.9%
Low-Moderate Risk
Not Applicable
CVE-2022-1720NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
2.1%
Low-Moderate Risk
Not Applicable
CVE-2022-1733NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
0.6%
Theoretical Threat
Not Applicable
CVE-2022-1735NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.3%
Low-Moderate Risk
Not Applicable
CVE-2022-1769NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
0.4%
Theoretical Threat
Not Applicable
CVE-2022-1785NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-1796NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.1%
Low-Moderate Risk
Not Applicable
CVE-2022-1851NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.6%
Low-Moderate Risk
Not Applicable
CVE-2022-1886NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.3%
Low-Moderate Risk
Not Applicable
CVE-2022-1897NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.5%
Low-Moderate Risk
Not Applicable
CVE-2022-1898NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.4%
Low-Moderate Risk
Not Applicable
CVE-2022-1927NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.6%
Low-Moderate Risk
Not Applicable
CVE-2022-1942NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.6%
Low-Moderate Risk
Not Applicable
CVE-2022-1968NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.4%
Low-Moderate Risk
Not Applicable
CVE-2022-2000NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.5%
Low-Moderate Risk
Not Applicable
CVE-2022-2042NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.4%
Low-Moderate Risk
Not Applicable
CVE-2022-2124NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.5%
Low-Moderate Risk
Not Applicable
CVE-2022-2125NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.6%
Low-Moderate Risk
Not Applicable
CVE-2022-2126NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.5%
Low-Moderate Risk
Not Applicable
CVE-2022-2129NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.4%
Low-Moderate Risk
Not Applicable
CVE-2022-2175NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.3%
Low-Moderate Risk
Not Applicable
CVE-2022-2182NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.5%
Low-Moderate Risk
Not Applicable
CVE-2022-2183NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.5%
Low-Moderate Risk
Not Applicable
CVE-2022-2206NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.3%
Low-Moderate Risk
Not Applicable
CVE-2022-2207NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.4%
Low-Moderate Risk
Not Applicable
CVE-2022-2210NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.3%
Low-Moderate Risk
Not Applicable
CVE-2022-2257NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.4%
Low-Moderate Risk
Not Applicable
CVE-2022-2264NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.2%
Low-Moderate Risk
Not Applicable
CVE-2022-2284NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.4%
Low-Moderate Risk
Not Applicable
CVE-2022-2285NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.4%
Low-Moderate Risk
Not Applicable
CVE-2022-2286NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.3%
Low-Moderate Risk
Not Applicable
CVE-2022-2288NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.4%
Low-Moderate Risk
Not Applicable
CVE-2022-2289NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.3%
Low-Moderate Risk
Not Applicable
CVE-2022-2304NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.4%
Low-Moderate Risk
Not Applicable
CVE-2022-2343NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.3%
Low-Moderate Risk
Not Applicable
CVE-2022-2344NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.2%
Low-Moderate Risk
Not Applicable
CVE-2022-2345NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.2%
Low-Moderate Risk
Not Applicable
CVE-2022-2522NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.6%
Theoretical Threat
Not Applicable
CVE-2022-2571NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-2580NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-2581NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-2816NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-2817NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-2819NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.6%
Theoretical Threat
Not Applicable
CVE-2022-2845NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-2849NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-2862NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.7%
Theoretical Threat
Not Applicable
CVE-2022-2889NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-2946NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-2982NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.8%
Theoretical Threat
Not Applicable
CVE-2022-3016NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-3037NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-3099NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-3134NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-3234NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-3235NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-3256NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-3296NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-3297NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-3324NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-3352NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-3491NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-3591NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.828-1.amzn2.0.1
0.4%
Theoretical Threat
Not Applicable
CVE-2022-4141NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1006-1.amzn2.0.1
0.4%
Theoretical Threat
Not Applicable
CVE-2022-4292NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1160-1.amzn2.0.1
0.7%
Theoretical Threat
Not Applicable
CVE-2022-47024NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.3%
Theoretical Threat
Not Applicable
CVE-2023-0049NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1160-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2023-0051NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2023-0054NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2023-0288NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2023-0433NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.6%
Theoretical Threat
Not Applicable
CVE-2023-0512NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2023-2610NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1592-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2023-4733NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2023-4734NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.6%
Theoretical Threat
Not Applicable
CVE-2023-4735NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.6%
Theoretical Threat
Not Applicable
CVE-2023-4738NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.6%
Theoretical Threat
Not Applicable
CVE-2023-4750NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2023-4751NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.6%
Theoretical Threat
Not Applicable
CVE-2023-4752NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.6%
Theoretical Threat
Not Applicable
CVE-2023-4781NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.6%
Theoretical Threat
Not Applicable
CVE-2026-52858NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.7
0.2%
Theoretical Threat
Not Applicable
CVE-2026-52860NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.7
0.2%
Theoretical Threat
Not Applicable
CVE-2026-55693NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.8
0.1%
Theoretical Threat
Not Applicable
CVE-2026-55895NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.8
0.2%
Theoretical Threat
Not Applicable
CVE-2026-57456NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.8
0.1%
Theoretical Threat
Not Applicable
CVE-2024-22667NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.1
0.6%
Theoretical Threat
Not Applicable
CVE-2025-1215NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.4
0.5%
Theoretical Threat
Not Applicable
CVE-2023-1127NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1367-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2023-5535NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.3
0.5%
Theoretical Threat
Not Applicable
CVE-2022-23491NONE0
ca-certificates
2021.2.50-72.amzn2.0.3
fixed in 2021.2.50-72.amzn2.0.5
0.5%
Theoretical Threat
Not Applicable
CVE-2024-39689NONE0
ca-certificates
2021.2.50-72.amzn2.0.3
fixed in 2023.2.68-1.amzn2.0.1
1.0%
Low-Moderate Risk
Not Applicable
CVE-2022-1620NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.6%
Low-Moderate Risk
Not Applicable
CVE-2022-3705NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.828-1.amzn2.0.1
1.2%
Low-Moderate Risk
Not Applicable
CVE-2023-5344NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.2
1.2%
Low-Moderate Risk
Not Applicable
CVE-2026-41411NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.6
0.5%
Theoretical Threat
Not Applicable
CVE-2022-29458NONE0
ncurses
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.4
1.3%
Low-Moderate Risk
Not Applicable
CVE-2022-29458NONE0
ncurses-base
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.4
1.3%
Low-Moderate Risk
Not Applicable
CVE-2022-29458NONE0
ncurses-libs
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.4
1.3%
Low-Moderate Risk
Not Applicable
CVE-2022-2287NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
1.3%
Low-Moderate Risk
Not Applicable
CVE-2023-1170NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1403-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2023-1175NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1403-1.amzn2.0.1
0.4%
Theoretical Threat
Not Applicable
CVE-2020-19185NONE0
ncurses
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.4%
Low-Moderate Risk
Not Applicable
CVE-2020-19186NONE0
ncurses
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.5%
Low-Moderate Risk
Not Applicable
CVE-2020-19187NONE0
ncurses
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.4%
Low-Moderate Risk
Not Applicable
CVE-2020-19188NONE0
ncurses
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.4%
Low-Moderate Risk
Not Applicable
CVE-2020-19189NONE0
ncurses
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.9%
Low-Moderate Risk
Not Applicable
CVE-2020-19190NONE0
ncurses
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.4%
Low-Moderate Risk
Not Applicable
CVE-2023-50495NONE0
ncurses
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.7
1.0%
Theoretical Threat
Not Applicable
CVE-2020-19185NONE0
ncurses-base
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.4%
Low-Moderate Risk
Not Applicable
CVE-2020-19186NONE0
ncurses-base
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.5%
Low-Moderate Risk
Not Applicable
CVE-2020-19187NONE0
ncurses-base
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.4%
Low-Moderate Risk
Not Applicable
CVE-2020-19188NONE0
ncurses-base
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.4%
Low-Moderate Risk
Not Applicable
CVE-2020-19189NONE0
ncurses-base
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.9%
Low-Moderate Risk
Not Applicable
CVE-2020-19190NONE0
ncurses-base
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.4%
Low-Moderate Risk
Not Applicable
CVE-2023-50495NONE0
ncurses-base
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.7
1.0%
Theoretical Threat
Not Applicable
CVE-2020-19185NONE0
ncurses-libs
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.4%
Low-Moderate Risk
Not Applicable
CVE-2020-19186NONE0
ncurses-libs
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.5%
Low-Moderate Risk
Not Applicable
CVE-2020-19187NONE0
ncurses-libs
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.4%
Low-Moderate Risk
Not Applicable
CVE-2020-19188NONE0
ncurses-libs
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.4%
Low-Moderate Risk
Not Applicable
CVE-2020-19189NONE0
ncurses-libs
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.9%
Low-Moderate Risk
Not Applicable
CVE-2020-19190NONE0
ncurses-libs
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
1.4%
Low-Moderate Risk
Not Applicable
CVE-2023-50495NONE0
ncurses-libs
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.7
1.0%
Theoretical Threat
Not Applicable
CVE-2021-3236NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.1
0.3%
Theoretical Threat
Not Applicable
CVE-2022-1674NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.6%
Low-Moderate Risk
Not Applicable
CVE-2022-1725NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-1771NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.2%
Low-Moderate Risk
Not Applicable
CVE-2022-2208NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.3%
Low-Moderate Risk
Not Applicable
CVE-2022-2231NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:8.2.5172-1.amzn2.0.1
1.2%
Low-Moderate Risk
Not Applicable
CVE-2022-2874NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-2923NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-2980NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.475-1.amzn2.0.1
0.7%
Theoretical Threat
Not Applicable
CVE-2022-3153NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2022-3278NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1314-1.amzn2.0.1
0.9%
Theoretical Threat
Not Applicable
CVE-2023-2609NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1592-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2023-1264NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1403-1.amzn2.0.1
0.4%
Theoretical Threat
Not Applicable
CVE-2023-1355NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1403-1.amzn2.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2023-46246NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2081-1.amzn2.0.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-24014NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.3
0.3%
Theoretical Threat
Not Applicable
CVE-2023-5441NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.1882-1.amzn2.0.3
0.4%
Theoretical Threat
Not Applicable
CVE-2019-17595NONE0
ncurses
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
2.0%
Low-Moderate Risk
Not Applicable
CVE-2019-17595NONE0
ncurses-base
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
2.0%
Low-Moderate Risk
Not Applicable
CVE-2019-17595NONE0
ncurses-libs
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
2.0%
Low-Moderate Risk
Not Applicable
CVE-2019-17594NONE0
ncurses
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
0.5%
Theoretical Threat
Not Applicable
CVE-2019-17594NONE0
ncurses-base
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
0.5%
Theoretical Threat
Not Applicable
CVE-2019-17594NONE0
ncurses-libs
6.0-8.20170212.amzn2.1.3
fixed in 6.0-8.20170212.amzn2.1.6
0.5%
Theoretical Threat
Not Applicable
CVE-2026-47167NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.7
0.1%
Theoretical Threat
Not Applicable
CVE-2023-48706NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.1
0.4%
Theoretical Threat
Not Applicable
CVE-2024-43802NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.2
0.3%
Theoretical Threat
Not Applicable
CVE-2025-29768NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.4
0.3%
Theoretical Threat
Not Applicable
CVE-2023-48231NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2120-1.amzn2.0.1
0.7%
Theoretical Threat
Not Applicable
CVE-2023-48232NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2120-1.amzn2.0.1
0.7%
Theoretical Threat
Not Applicable
CVE-2023-48233NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2120-1.amzn2.0.1
0.7%
Theoretical Threat
Not Applicable
CVE-2023-48234NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2120-1.amzn2.0.1
0.7%
Theoretical Threat
Not Applicable
CVE-2023-48235NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2120-1.amzn2.0.1
0.7%
Theoretical Threat
Not Applicable
CVE-2023-48236NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2120-1.amzn2.0.1
0.7%
Theoretical Threat
Not Applicable
CVE-2023-48237NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2120-1.amzn2.0.1
0.7%
Theoretical Threat
Not Applicable
CVE-2025-26603NONE0
vim-data
2:8.2.4857-1.amzn2.0.1
fixed in 2:9.0.2153-1.amzn2.0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2025-48924NONE0
commons-lang:commons-lang
2.4
No fix yet
2.2%
Low-Moderate Risk
Not Applicable
CVE-2025-48924NONE0
commons-lang:commons-lang
2.6
No fix yet
2.2%
Low-Moderate Risk
Not Applicable
CVE-2023-32803NONE0
ca-certificates
2021.2.50-72.amzn2.0.3
fixed in 2021.2.50-72.amzn2.0.7
—
Not Applicable
CVE-2026-53615NONE0
libblkid
2.30.2-2.amzn2.0.7
fixed in 2.30.2-2.amzn2.0.14
—
Not Applicable
CVE-2026-53615NONE0
libmount
2.30.2-2.amzn2.0.7
fixed in 2.30.2-2.amzn2.0.14
—
Not Applicable
CVE-2026-53615NONE0
libuuid
2.30.2-2.amzn2.0.7
fixed in 2.30.2-2.amzn2.0.14
—
Not Applicable
GHSA-r7wm-3cxj-wff9NONE0
com.fasterxml.jackson.core:jackson-core
2.12.6
fixed in 2.18.8, 2.21.4, 2.22.1
—
Not Applicable
GHSA-72hv-8253-57qqNONE0
com.fasterxml.jackson.core:jackson-core
2.12.6
fixed in 2.21.1, 2.18.6
—
Not Applicable
GHSA-r7wm-3cxj-wff9NONE0
com.fasterxml.jackson.core:jackson-core
2.13.2
fixed in 2.18.8, 2.21.4, 2.22.1
—
Not Applicable
GHSA-72hv-8253-57qqNONE0
com.fasterxml.jackson.core:jackson-core
2.13.2
fixed in 2.21.1, 2.18.6
—
Not Applicable
GHSA-xpw8-rcwv-8f8pNONE0
io.netty:netty-codec-http2
4.1.72.Final
fixed in 4.1.100.Final
—
Not Applicable
GHSA-xpw8-rcwv-8f8pNONE0
io.netty:netty-codec-http2
4.1.73.Final
fixed in 4.1.100.Final
—
Not Applicable
CVE-2026-33558NONE0
org.apache.kafka:kafka-clients
3.0.0
fixed in 3.9.2, 4.0.1
0.6%
Theoretical Threat
Not Applicable
CVE-2026-59949NONE0
org.lz4:lz4-java
1.7.1
No fix yet
—
Not Applicable
GHSA-6g3j-p5g6-992fNONE0
org.opensearch:opensearch
2.0.1
fixed in 1.3.14, 2.11.1
—
Not Applicable
CVE-2025-22233NONE0
org.springframework:spring-context
5.2.20.RELEASE
fixed in 6.2.7, 6.1.20
0.4%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.