CVE-2026-104002 — Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actors to read sensitive field values that the application int…
Published: 2026-10-01 · CVSS: 6.0 · CVSS 4.0
A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7