Amazon Kinesis Producer Library for Java: Credential Exposure Vulnerability
Amazon Kinesis Producer Library for Java versions before 1.0.8 expose AWS credentials through debug logs and process arguments, allowing local users to steal credentials. Affected versions: com.amazonaws:amazon-kinesis-producer ≤ 0.15.12 and software.amazon.kinesis:amazon-kinesis-producer < 1.0.8. Action required: upgrade immediately if you're running these versions, especially if DEBUG logging is enabled.
source: [aws/security-bulletin]