[MEDIUM] AWS SDK for PHP's S3 Encryption Client has a Key Commitment Issue

PKSA-dxyf-6n16-t87m CVE-2025-14761 GHSA-x8cp-jf6f-r4xh

Affected version: <3.368.0

Reported by:
GitHub

[MEDIUM] Potential URI resolution path traversal in the AWS SDK for PHP

PKSA-n3s6-289w-qtqb CVE-2023-51651 GHSA-557v-xcg6-rm5m

Affected version: >=3.0.0,<3.288.1

Reported by:
FriendsOfPHP/security-advisories, GitHub