What’s Vulnerable › Products

AWS Serverless Application Model Command Line Interface vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your AWS Serverless Application Model Command Line Interface version is affected

Latest AWS Serverless Application Model Command Line Interface vulnerabilities

• CVE-2025-3048 — Path Traversal in AWS SAM CLI allows file copy to local cache (CVSS 6.5)
• CVE-2025-3047 — Path Traversal in AWS SAM CLI allows file copy to build container (CVSS 6.5)