{"action":"Upgrade AWSSDK.Extensions.CloudFront.Signers to 4.0.0.26 or later.","affected":[{"fixed":"4.0.0.26","introduced":"4.0.0.0"}],"component":"AWSSDK.Extensions.CloudFront.Signers","cve_ids":[],"ecosystem":"NuGet","exploited":false,"fixed_versions":["4.0.0.26"],"ghsa_id":"GHSA-mvm6-f9r3-fgfx","id":"tcs_01M5N8V77CWGEVGEFPEWPEAGPZ","modified_at":"2026-03-27T22:32:55.769816Z","published_at":"2026-03-27T22:22:28Z","references":["https://osv.dev/vulnerability/GHSA-mvm6-f9r3-fgfx","https://github.com/aws/aws-sdk-net/security/advisories/GHSA-mvm6-f9r3-fgfx","https://github.com/aws/aws-sdk-net"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-mvm6-f9r3-fgfx#NuGet/AWSSDK.Extensions.CloudFront.Signers","url":"https://osv.dev/vulnerability/GHSA-mvm6-f9r3-fgfx"}],"summary":"AWS SDK for .NET: Improper escaping of special characters in CloudFront policy document construction"}