Missing cryptographic key commitment in the Amazon S3 Encryption Client for Go may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "inst…

{
                    "defaultStatus": "unaffected",
                    "product": "S3 Encryption Client for Go",
                    "vendor": "AWS",
                    "versions": [
                        {
                            "status": "unaffected",
                            "version": "4.0"
                        }
                    ]
                }