Advisories · Technology
aws bedrock-agentcore-starter-toolkit.
Every CVE that names aws bedrock-agentcore-starter-toolkit among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.7 Medium
Server-side request forgery and local file read via unrestricted external OpenAPI reference resolution in Bedrock AgentCore Starter Toolkit agent import
- aws bedrock-agentcore-starter-toolkit
- Server-side request forgery (SSRF)
- CVSS 8.8 High
Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import
- aws bedrock-agentcore-starter-toolkit
- Code injection