Amazon Linux 2023

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1452 Related CVEs: CVE-2026-25990 CVE-2022-22817 CVE-2023-50447 CVE-2022-22816 CVE-2021-25290 CVE-2021-25291 CVE-2021-25293 CVE-2021-27921  +9 more Upstream summary: Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, n out-of-bounds write may […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1362 Related CVEs: CVE-2025-68615 Upstream summary: net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1678 Related CVEs: CVE-2026-41066 CVE-2021-43818 CVE-2022-2309 Upstream summary: lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1567 Related CVEs: CVE-2025-62518 CVE-2026-33055 CVE-2026-33056 CVE-2026-25727 Upstream summary: tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips the PAX size […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2023-248 Related CVEs: CVE-2023-35116 CVE-2025-52999 CVE-2025-49128 Upstream summary: An issue was discovered jackson-databind thru 2.15.2 allows attackers to cause a denial of service or other unspecified impacts via crafted object […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1615 Related CVEs: CVE-2026-27143 CVE-2026-27144 CVE-2026-32280 CVE-2026-32281 CVE-2026-32282 CVE-2026-32283 CVE-2026-32288 CVE-2026-32289  +12 more Upstream summary: Arithmetic over induction variables in loops were not correctly checked for underflow or overflow in […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2023-031 Related CVEs: CVE-2021-43527 CVE-2023-7104 CVE-2023-0767 CVE-2026-6766 CVE-2026-6767 CVE-2026-6772 CVE-2023-6135 CVE-2023-5388 Upstream summary: NSS (Network Security Services) up to and including 3.73 is vulnerable to a heap overflow when handling […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1542 Related CVEs: CVE-2026-27135 CVE-2024-28182 CVE-2023-44487 CVE-2023-35945 Upstream summary: nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1647 Related CVEs: CVE-2026-27135 CVE-2024-36137 CVE-2026-21710 CVE-2026-21712 CVE-2026-21713 CVE-2026-21714 CVE-2026-21715 CVE-2026-21716  +12 more Upstream summary: nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to […]