software.amazon.encryption.s3:amazon-s3-encryption-client-java (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package software.amazon.encryption.s3:amazon-s3-encryption-client-java, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (1)

• CVE-2025-14763 — CVSS 5.3 (medium): Missing cryptographic key commitment in the Amazon S3 Encryption Client for Java may allow a user with write access to the S3 bucket to…