AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access

Attributed metadata history

Up to 100 retained publisher events per page for 5106b7567d5fe86a3e168ff9b529906124c73d6f6742c77e3eeda9f87d987a96. Withdrawals and unavailable references remain attributed to their publishers.

intelligence_src_d11443da85ea659d49

observed · 2026-10-12 15:37:03 UTC

available

Fingerprint: 46fd50ac705e064c7517d97d61b5ec511c9b1ada6209622159dd39573ba08e5c

intelligence_src_d11443da85ea659d49

observed · 2026-10-12 15:37:03 UTC

The API action ListVpcConnectorsForAccount did not properly validate the "AccountId" parameter that was passed to it. As a result, any account ID could be provided and the API would return the information for that account. This would leak minor information about the VPC configuration for App Runner in the account including the subnet ID, security group ID, and the VPC Connector ARN.

Fingerprint: ab0ab3a672a171cf484957a6bee487ed2668cd7cbfa3fa203f6664c36f17f8b0