Homepage

amazon-ecr-credential-helper

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the amazon-ecr-credential-helper package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Cross-site Scripting (XSS)

<0:0.12.0-3.amzn2023
  • H
Allocation of Resources Without Limits or Throttling

<0:0.12.0-3.amzn2023
  • H
Improper Encoding or Escaping of Output

<0:0.12.0-3.amzn2023
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<0:0.12.0-3.amzn2023
  • H
CVE-2026-33811

<0:0.12.0-3.amzn2023
  • H
CVE-2026-39825

<0:0.12.0-3.amzn2023
  • H
CVE-2026-42499

<0:0.12.0-3.amzn2023
  • M
Cross-site Scripting (XSS)

<0:0.12.0-2.amzn2023
  • M
Multiple Locks of a Critical Resource

<0:0.12.0-2.amzn2023
  • M
Allocation of Resources Without Limits or Throttling

<0:0.12.0-2.amzn2023
  • M
Expected Behavior Violation

<0:0.12.0-2.amzn2023
  • M
Excessive Platform Resource Consumption within a Loop

<0:0.12.0-2.amzn2023
  • M
Compiler Optimization Removal or Modification of Security-critical Code

<0:0.12.0-2.amzn2023
  • M
Time-of-check Time-of-use (TOCTOU)

<0:0.12.0-2.amzn2023
  • M
Allocation of Resources Without Limits or Throttling

<0:0.12.0-2.amzn2023
  • M
Directory Traversal

<0:0.12.0-1.amzn2023
  • M
Improper Validation of Syntactic Correctness of Input

<0:0.12.0-1.amzn2023
  • M
Cross-site Scripting (XSS)

<0:0.12.0-1.amzn2023
  • M
Missing Required Cryptographic Step

<0:0.11.0-3.amzn2023
  • M
CVE-2025-68121

<0:0.11.0-3.amzn2023
  • M
Allocation of Resources Without Limits or Throttling

<0:0.11.0-3.amzn2023
  • M
Allocation of Resources Without Limits or Throttling

<0:0.11.0-3.amzn2023
  • H
Excessive Platform Resource Consumption within a Loop

<0:0.11.0-2.amzn2023
  • H
Resource Exhaustion

<0:0.11.0-2.amzn2023
  • H
Improper Certificate Validation

<0:0.11.0-2.amzn2023
  • H
Improper Validation of Syntactic Correctness of Input

<0:0.10.1-3.amzn2023
  • H
CVE-2025-58186

<0:0.10.1-3.amzn2023
  • H
Allocation of Resources Without Limits or Throttling

<0:0.10.1-3.amzn2023
  • H
Allocation of Resources Without Limits or Throttling

<0:0.10.1-3.amzn2023
  • H
Allocation of Resources Without Limits or Throttling

<0:0.10.1-3.amzn2023
  • H
Allocation of Resources Without Limits or Throttling

<0:0.10.1-3.amzn2023
  • H
Creation of Immutable Text Using String Concatenation

<0:0.10.1-3.amzn2023
  • H
Allocation of Resources Without Limits or Throttling

<0:0.10.1-3.amzn2023
  • H
Reachable Assertion

<0:0.10.1-3.amzn2023
  • M
Improper Certificate Validation

<0:0.10.1-2.amzn2023
  • M
CVE-2025-4673

<0:0.10.1-2.amzn2023
  • H
HTTP Request Smuggling

<0:0.10.0-1.amzn2023
  • M
Misinterpretation of Input

<0:0.9.0-1.amzn2023
  • M
Resource Exhaustion

<0:0.7.1-4.amzn2023
  • M
Resource Exhaustion

<0:0.7.1-4.amzn2023
  • H
Resource Exhaustion

<0:0.7.1-2.amzn2023
  • H
HTTP Response Splitting

<0:0.7.1-2.amzn2023
  • H
Resource Exhaustion

<0:0.7.1-1.amzn2023