File and Path Handling

Every one of the 24 is a mark on the map. Named now: 1 to 24, most at risk first.

1. Path traversal issue in Deep Java LibraryCVE-2025-0851AWS · CVSS 9.8 · 26% likely

   CWE-36

2. Partial Path Traversal in com.amazonaws:aws-java-sdk-s3CVE-2022-31159aws · CVSS 7.9 · 1.6% likely

   CWE-22

3. Path Traversal in AWS SAM CLI allows file copy to build containerCVE-2025-3047AWS · CVSS 6.5 · 0.8% likely

   CWE-61

4. Untrusted search path in the cross-user process launcher in OpenJD Sessions for Python, as used in the AWS Deadline Cloud worker agentCVE-2026-126087AWS · CVSS 8.8 · 0.8% likely

   CWE-426

5. Path Traversal in AWS SAM CLI allows file copy to local cacheCVE-2025-3048AWS · CVSS 6.5 · 0.7% likely

   CWE-61

6. RES Auth.GetUserPrivateKey Arbitrary File ReadCVE-2026-14904AWS · CVSS 6.5 · 0.6% likely

   CWE-59

7. Multiple Path Traversal Variants in awslabs/toughCVE-2026-6968AWS · CVSS 5.9 · 0.5% likely

   CWE-22

8. Relative path traversal during model archive extraction in Amazon Web Services Multi Model ServerCVE-2026-115812AWS · CVSS 9.8 · 0.5% likely

   CWE-23

9. Privilege Escalation in AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQLCVE-2026-11400AWS · CVSS 8 · 0.5% likely

   CWE-426

10. Path traversal in Amazon Braket SDK local hybrid job input data downloadCVE-2026-124034AWS · CVSS 6.4 · 0.5% likely

    CWE-23

11. Relative path traversal in the log export commands in AWS ParallelCluster CLICVE-2026-124033AWS · CVSS 6.4 · 0.4% likely

    CWE-23

12. Potential URI resolution path traversal in the AWS SDK for PHPCVE-2023-51651aws · CVSS 6 · 0.4% likely

    CWE-22

13. Path traversal and arbitrary file write in the workflow linters of aws-healthomics-mcp-serverCVE-2026-15415AWS · CVSS 5.5 · 0.4% likely

    CWE-23

14. Privilege escalation in Aurora PostgreSQL dialect detection in AWS Advanced Go WrapperCVE-2026-126793AWS · CVSS 8 · 0.3% likely

    CWE-426

15. Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP ServerCVE-2026-116635AWS · CVSS 6.1 · 0.3% likely

    CWE-23

16. Privilege Escalation in AWS Advanced Go Wrapper for Amazon Aurora PostgreSQLCVE-2026-11401AWS · CVSS 8 · 0.3% likely

    CWE-426

17. Local Privilege Escalation Vulnerability in AWS Client VPN macOS ClientCVE-2025-11462AWS · CVSS 7.8 · 0.2% likely

    CWE-59

18. Arbitrary Host File Overwrite via Symlink in Firecracker JailerCVE-2026-1386AWS · CVSS 6 · 0.2% likely

    CWE-61

19. Zip Slip Arbitrary File Write in AWS diagram-as-code (awsdac)CVE-2026-81838aws · CVSS 7.1 · 0.2% likely

    CWE-23

20. GluonTS arbitrary file write during archive extractionCVE-2026-119083AWS · CVSS 7.8 · 0.2% likely

    CWE-22

21. Relative path traversal in the generated file manifest cleanup component in projenCVE-2026-89065AWS · CVSS 7.1 · 0.2% likely

    CWE-23

22. Improper limitation of a pathname to a restricted directory in aws-transform-mcp-serverCVE-2026-18953AWS · CVSS 8.6 · 0.2% likely

    CWE-22

23. Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development KitCVE-2026-85028AWS · CVSS 7.8 · 0.2% likely

    CWE-379

24. Improper link resolution in asset bundling output handling in aws-cdk-libCVE-2026-107608AWS · CVSS 5.5 · 0.1% likely

    CWE-59

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.