{"action":"Upgrade craftcms/aws-s3 to 2.2.5 or later.","affected":[{"fixed":"2.2.5","introduced":"2.0.2"}],"component":"craftcms/aws-s3","cve_ids":["CVE-2026-32265"],"ecosystem":"Packagist","epss":0.00483,"exploited":false,"fixed_versions":["2.2.5"],"ghsa_id":"GHSA-hwj7-4vgc-j3v9","id":"tcs_01M5KF3ZBAZ9ZX0ST0Z3V20MSW","modified_at":"2026-03-19T21:17:22.321753Z","published_at":"2026-03-16T18:13:33Z","references":["https://osv.dev/vulnerability/GHSA-hwj7-4vgc-j3v9","https://github.com/craftcms/aws-s3/security/advisories/GHSA-hwj7-4vgc-j3v9","https://nvd.nist.gov/vuln/detail/CVE-2026-32265","https://github.com/craftcms/aws-s3/commit/ef8904d8b6856e4a52893a9e1e52988ae110aa3f","https://github.com/craftcms/aws-s3"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-hwj7-4vgc-j3v9","url":"https://osv.dev/vulnerability/GHSA-hwj7-4vgc-j3v9"}],"summary":"Amazon S3 for Craft CMS has an Information Disclosure vulnerability"}