What version of aws-sdk-java does CVE-2021-4277 affect?

[nefnohack]

CVE-2021-4277

https://github.com/jeremylong/DependencyCheck/actions/runs/3843398265

[BruceLuX]

We also have the same question, any one can help ?

[debora-ito]

According to CVE-2021-4277: "A vulnerability, which was classified as problematic, has been found in fredsmith utils".

The Java SDK doesn't use fredsmith utils, and the link to the commit gives me a 404, so I think the repository is private.

Can you elaborate on how do you think the security report is related to the Java SDK?