VDB

GHSA-g59m-gf8j-gjf5

GHSA-g59m-gf8j-gjf5 PUBLISHED CVSS 3.700000047683716 LOW

AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value

Record from GitHub Advisory Database · Published January 8, 2026

aws-sdk-cloudfrontkeyvaluestore is fixed in 1.88.0 (AWS Registry)

AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
aws-sdk-frauddetectorAWS Registry1.89.0
aws-sdk-acmAWS Registry1.92.0
aws-sdk-clouddirectoryAWS Registry1.89.0
aws-sdk-forecastqueryAWS Registry1.89.0
aws-sdk-ecrpublicAWS Registry1.92.0
aws-sdk-finspaceAWS Registry1.93.0
aws-sdk-codestarnotificationsAWS Registry1.89.0
aws-sdk-glacierAWS Registry1.89.0
aws-sdk-controlcatalogAWS Registry1.74.0
aws-sdk-ioteventsdataAWS Registry1.89.0
aws-sdk-resourcegroupsAWS Registry1.92.0
aws-sdk-iotfleetwiseAWS Registry1.96.0

80 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 3.1
3.700000047683716
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

VendorProductVersions
crates.ioaws-sdk-forecastquery0
crates.ioaws-sdk-finspace0
crates.ioaws-sdk-codestarnotifications0
crates.ioaws-sdk-pinpointsmsvoice0
crates.ioaws-sdk-cloudfrontkeyvaluestore0
crates.ioaws-sdk-glacier0
crates.ioaws-sdk-rdsdata0
crates.ioaws-sdk-elastictranscoder0
crates.ioaws-sdk-sagemaker0
crates.ioaws-sdk-swf0
crates.ioaws-sdk-transcribe0
crates.ioaws-sdk-greengrassv20
crates.ioaws-sdk-ecrpublic0
crates.ioaws-sdk-workmail0
crates.ioaws-sdk-migrationhubconfig0
crates.ioaws-sdk-backupsearch0
crates.ioaws-sdk-odb0
crates.ioaws-sdk-wafregional0
crates.ioaws-sdk-ssmsap0
crates.ioaws-sdk-billing0

…and 394 more

Timeline

  • Jan 8, 2026 CVE Published
  • Jan 8, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-g59m-gf8j-gjf5
vulnetix vdb fixes GHSA-g59m-gf8j-gjf5

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-g59m-gf8j-gjf5/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›