Security
فارسی
All products

aws-cdk-lib

npm · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
AWS CDK CodeBuild S3 Log Encryption Boolean InversionGHSA-464C-974J-9XM6 · GO-2026-6093Version ranges need review. github.com/aws/aws-cdk-go/awscdk/v2github.com/aws/aws-cdk-go/awscdk GoMavennpmNuGetPyPI Low Fix reported
AWS CDK EKS overly permissive trust policiesCVE-2023-35165 · GHSA-RX28-R23P-2QC3 @aws-cdk/aws-eksaws-cdk-lib npm Medium Fix reported
aws-cdk-lib: OS Command Injection in NodejsFunction Docker BundlingCVE-2026-13760 · GHSA-VCRF-J523-4MRF aws-cdk-lib npm High Fix reported
aws-cdk-lib: OS Command Injection in NodejsFunction BundlingCVE-2026-11417 · GHSA-999R-QQ7V-R334 aws-cdk-lib npm High Fix reported
aws-cdk-lib's aspect order change causes different Permissions Boundary assigned to RoleGHSA-QC59-CXJ2-C2W4 aws-cdk-lib npm Low Fix reported
AWS CDK CodePipeline: trusted entities are too broadGHSA-5PQ3-H73F-66HR aws-cdk-lib npm Low Fix reported
aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient ConstructGHSA-QQ4X-C6H6-RFXH aws-cdk-lib npm Medium Fix reported
AWS Cloud Development Kit (AWS CDK) IAM OIDC custom resource allows connection to unauthorized OIDC providerCVE-2025-23206 · GHSA-V4MQ-X674-FF73 aws-cdk-lib npm Low Fix reported