CVE-2023-48054: Localstack

High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.

Affected products

• Localstack Localstack: version 2.3.2 only

Published 2023-11-16. Last modified 2026-06-17.