The Lab · 2026-03-26 20:27:24 · GitHub Issues
A critical information disclosure vulnerability has been identified across all Lambda functions within a major codebase, exposing detailed system internals through error messages. The flaw, rated HIGH severity, allows attackers to gather significant reconnaissance data, including full stack traces, internal file paths,...
The Lab · 2026-04-08 07:27:03 · GitHub Issues
A GitHub pull request is forcing a major security update for the AWS Lambda SDK, jumping from version 1.69.0 to 1.88.5. The automated dependency management tool Renovate has flagged this update, which is explicitly tagged as a security fix. The PR's truncated body and a warning that some dependencies could not be looke...
The Lab · 2026-04-17 15:22:52 · GitHub Issues
A critical security oversight has been identified in a NASA Planetary Data System (PDS) Lambda function, exposing a potential vector for confused deputy attacks. The function `pds-nucleus-s3-file-event-processor.py` is missing the `ExpectedBucketOwner` parameter in its S3 `get_object` call, a standard AWS security best...