MEDIUM4.3Go
GHSA-6jvc-q2x7-pchv· CVE-2022-2582, GHSA-76wf-9vgp-pj7wAWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field
Modified: 9/10/2026
package
Go/github.com/aws/aws-sdk-go
pkg:go/github.com/aws/aws-sdk-go
LOW2.5Go
GHSA-7f33-f4f5-xwgw· CVE-2020-8912, GO-2022-0635In-band key negotiation issue in AWS S3 Crypto SDK for golang
Modified: 9/10/2026
MEDIUM5.6Go
GHSA-f5pg-7wfw-84q9· CVE-2020-8911, GO-2022-0646CBC padding oracle issue in AWS S3 Crypto SDK for golang
Modified: 9/10/2026
—Go
GO-2022-0391· CVE-2022-2582, GHSA-6jvc-q2x7-pchvExposure of unencrypted plaintext hash in github.com/aws/aws-sdk-go
Modified: 2/4/2026
—Go
GO-2022-0635· CVE-2020-8912, GHSA-7f33-f4f5-xwgwIn-band key negotiation issue in AWS S3 Crypto SDK for golang in github.com/aws/aws-sdk-go
Modified: 2/4/2026
—Go
GO-2022-0646· CVE-2020-8911, GHSA-f5pg-7wfw-84q9CBC padding oracle issue in AWS S3 Crypto SDK for golang in github.com/aws/aws-sdk-go
Modified: 2/4/2026