Packagist/aws/aws-sdk-php CVE-2023-51651, CVE-2025-69820: medium 6, EPSS 0.38%

Potential URI resolution path traversal in the AWS SDK for PHP

Action: Upgrade aws/aws-sdk-php to 3.288.1 or later.

composer require aws/aws-sdk-php:3.288.1

Affected

Fixed versions

Sources

• osv: GHSA-557v-xcg6-rm5m
• https://github.com/aws/aws-sdk-php/security/advisories/GHSA-557v-xcg6-rm5m
• https://nvd.nist.gov/vuln/detail/CVE-2023-51651
• https://github.com/aws/aws-sdk-php/commit/aebc9f801438746ac4ade327551576cb75f635f2
• https://github.com/FriendsOfPHP/security-advisories/blob/master/aws/aws-sdk-php/CVE-2023-51651.yaml
• https://github.com/aws/aws-sdk-php
• https://github.com/aws/aws-sdk-php/releases/tag/3.288.1

CVE-2023-51651, CVE-2025-69820 · published 2023-12-21T23:16:13Z · modified 2026-02-04T07:36:06.785913Z · JSON