{"action":"Upgrade dynamodb-encryption-sdk to 1.3.0 or later.","affected":[{"fixed":"1.3.0","introduced":"0"}],"component":"dynamodb-encryption-sdk","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["1.3.0"],"ghsa_id":"GHSA-4ph2-8337-hm62","id":"tcs_01M5KEYQ002S416XH4TSXYVMBF","modified_at":"2024-12-02T05:48:48.199183Z","published_at":"2021-02-08T17:43:49Z","references":["https://osv.dev/vulnerability/GHSA-4ph2-8337-hm62","https://github.com/aws/aws-dynamodb-encryption-python/security/advisories/GHSA-4ph2-8337-hm62","https://github.com/aws/aws-dynamodb-encryption-python/commit/90606ec9af7c2b5cb338d64639a62ee867d38d6b","https://github.com/aws/aws-dynamodb-encryption-python/blob/master/CHANGELOG.rst#130----2021-02-04","https://pypi.org/project/dynamodb-encryption-sdk"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-4ph2-8337-hm62","url":"https://osv.dev/vulnerability/GHSA-4ph2-8337-hm62"}],"summary":"Key Caching behavior in the DynamoDB Encryption Client."}