| id: GO-2025-3891 |
| modules: |
| - module: github.com/aws/amazon-ecs-agent |
| versions: |
| - introduced: 0.0.3 |
| - fixed: 1.97.1 |
| vulnerable_at: 1.97.0 |
| summary: Information Disclosure in Amazon ECS Container Agent in github.com/aws/amazon-ecs-agent |
| cves: |
| - CVE-2025-9039 |
| ghsas: |
| - GHSA-wm7x-ww72-r77q |
| references: |
| - advisory: https://github.com/aws/amazon-ecs-agent/security/advisories/GHSA-wm7x-ww72-r77q |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2025-9039 |
| - web: https://aws.amazon.com/security/security-bulletins/AWS-2025-018 |
| - web: https://github.com/aws/amazon-ecs-agent/releases/tag/v1.97.1 |
| source: |
| id: GHSA-wm7x-ww72-r77q |
| created: 2025-08-15T17:52:48.090830671Z |
| review_status: UNREVIEWED |