CVE-2026-44308
1 advisory.
Maven/io.awspring.cloud:spring-cloud-aws-sns CVE-2026-44308: medium
Spring Cloud AWS missing SNS message signature verification allows spoofing of HTTP/HTTPS endpoint notifications
Action: Upgrade io.awspring.cloud:spring-cloud-aws-sns to 4.0.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.0.2 | - |
| 3.0.0 | - | 3.4.2 |
Fixed versions
| 4.0.2 |
Sources
- osv: GHSA-r4w4-wv68-qv85
- https://github.com/awspring/spring-cloud-aws/security/advisories/GHSA-r4w4-wv68-qv85
- https://nvd.nist.gov/vuln/detail/CVE-2026-44308
- https://github.com/awspring/spring-cloud-aws/pull/1614
- https://github.com/awspring/spring-cloud-aws/commit/6ab2efd97891a3d0ed0126ffa1ce223c9cfa9638
- https://github.com/awspring/spring-cloud-aws
CVE-2026-44308 · published · modified · JSON