Homepage

bedrock-agentcore-starter-toolkit@0.3.13

A starter toolkit for using Bedrock AgentCore

  • latest version

    0.3.14

  • latest non vulnerable version

    0.3.14

  • first published

    1 years ago

  • latest version published

    20 days ago

  • licenses detected

  • View bedrock-agentcore-starter-toolkit package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the bedrock-agentcore-starter-toolkit package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Arbitrary Code Injection

    bedrock-agentcore-starter-toolkit is an A starter toolkit for using Bedrock AgentCore

    Affected versions of this package are vulnerable to Arbitrary Code Injection via the agent import functionality, which incorporates configuration values into generated Python source code without safe literal encoding. An authenticated same-account actor can supply crafted configuration values that, when a user imports and subsequently runs or deploys a Bedrock Agent, result in arbitrary code execution within the generated Python source.

    Note: This is only exploitable by an authenticated actor within the same AWS account who can influence the configuration values consumed during agent import.

    How to fix Arbitrary Code Injection?

    Upgrade bedrock-agentcore-starter-toolkit to version 0.3.14 or higher.

    [0.1.4,0.3.14)
    • M
    Server-side Request Forgery (SSRF)

    bedrock-agentcore-starter-toolkit is an A starter toolkit for using Bedrock AgentCore

    Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) via unrestricted external OpenAPI reference resolution in the agent import functionality. When processing OpenAPI schema content associated with a Bedrock Agent action group, the toolkit resolves external $ref values without restriction, allowing an authenticated actor in the same AWS account to supply crafted external reference values that cause the importing user's environment to issue arbitrary outbound HTTP requests and read arbitrary local files.

    How to fix Server-side Request Forgery (SSRF)?

    Upgrade bedrock-agentcore-starter-toolkit to version 0.3.14 or higher.

    [0.1.4,0.3.14)
    Go back to all versions of this package