Threats affecting pkg:brew/aws-sso-util

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 1.0%	CVE-2024-47081Aws sso util · Requests vulnerable to .netrc credentials leak via malicious URLs Medium5.3EPSS 1.0%2026-08-13GCVE DatabaseCVE-2024-47081 A vulnerability in aws-sso-util versions 4.26.0 up to but not including 4.33.0_2 allows .netrc credentials to be leaked via maliciously crafted URLs due to a URL parsing issue in the Requests library. This can expose sensitive credentials to third parties. The issue is fixed in version 4.33.0_2. A workaround for older versions is to disable .netrc file usage by setting trust_env=False in Requests sessions. EPSS 1.0%Report on CVE-2024-47081 Vulnerability #brew-aws-sso-util-cve-2024-47081 #homebrew	GCVE Database	2026-08-13

Page 1 of 1