Threats tagged 'rustsec-2026-0047'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.8%	CVE-2026-3338Aws lc sys · PKCS7_verify Signature Validation Bypass in AWS-LC High7.5EPSS 0.8%2026-03-02GCVE DatabaseCVE-2026-3338 CVE-2026-3338 is a high-severity vulnerability in the aws-lc-sys library, specifically in the PKCS7_verify() function of AWS-LC. It allows an unauthenticated attacker to bypass signature verification when processing PKCS7 objects with Authenticated Attributes. This flaw affects aws-lc-sys versions from 0.24.0 up to, but not including, 0.38.0. There is no workaround; users should upgrade to version 0.38.0 or later. Customers of AWS cloud services are not impacted and do not need to take action. EPSS 0.8%Report on CVE-2026-3338 Vulnerability #rustsec-2026-0047 #crates-io	GCVE Database	2026-03-02

Page 1 of 1