{"action":"Upgrade aws-encryption-sdk to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"aws-encryption-sdk","cve_ids":["CVE-2020-8897"],"ecosystem":"PyPI","epss":0.00399,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-wqgp-vphw-hphf","id":"tcs_01M5KG2R0X7R4CPXAD8ZKE1JZ1","modified_at":"2026-09-10T03:49:09.519595036Z","published_at":"2021-10-12T16:01:12Z","references":["https://osv.dev/vulnerability/GHSA-wqgp-vphw-hphf","https://github.com/google/security-research/security/advisories/GHSA-wqgp-vphw-hphf","https://nvd.nist.gov/vuln/detail/CVE-2020-8897","https://aws.amazon.com/blogs/security/improved-client-side-encryption-explicit-keyids-and-key-commitment","https://github.com/pypa/advisory-database/tree/main/vulns/aws-encryption-sdk/PYSEC-2020-261.yaml"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-wqgp-vphw-hphf","url":"https://osv.dev/vulnerability/GHSA-wqgp-vphw-hphf"}],"summary":"Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness"}