Skip to content
5.3 Medium

CVE-2026-104002 A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow…

Description

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actors to read sensitive field values that the application intended to mask.  To remediate this issue, users should upgrade to version 3.35.0.

Affected products and versions

Product Affected versions Fixed in
powertools-lambda-python 3.6 3.6.0 → 3.34.0 No fix stated
Track this CVE