security_agent_plugin vulnerabilities

CVEs whose affected-version data names the security_agent_plugin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-87912Medium· 5.9

1w ago

Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops

A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials a…

▾ SunlitAWS · AWS Security Agent pluginEPSS 0.25%via CVEORG