Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-464c-974j-9xm6
  • Go/github.com/aws/aws-cdk-go/awscdk
  • Go/github.com/aws/aws-cdk-go/awscdk/v2
  • Maven/software.amazon.awscdk:aws-cdk-lib
  • Maven/software.amazon.awscdk:codebuild
  • NuGet/Amazon.CDK.AWS.CodeBuild
  • ... 5 more
 AWS CDK CodeBuild S3 Log Encryption Boolean Inversion 24 Jul
  • Fix available
  • Severity - 3.3 (Low)
GHSA-vcrf-j523-4mrf
  • npm/aws-cdk-lib
 aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling 21 Jul
  • Fix available
  • Severity - 7.0 (High)
GHSA-999r-qq7v-r334
  • npm/aws-cdk-lib
 aws-cdk-lib: OS Command Injection in NodejsFunction Bundling 15 Jun
  • Fix available
  • Severity - 7.0 (High)
GHSA-qc59-cxj2-c2w4
  • npm/aws-cdk-lib
 aws-cdk-lib's aspect order change causes different Permissions Boundary assigned to Role 15 Apr 2025
  • Fix available
  • Severity - 2.2 (Low)
GHSA-qq4x-c6h6-rfxh
  • npm/aws-cdk-lib
 aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient Construct 31 Mar 2025
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-5pq3-h73f-66hr
  • npm/aws-cdk-lib
 AWS CDK CodePipeline: trusted entities are too broad 24 Mar 2025
  • Fix available
  • Severity - 3.8 (Low)
GHSA-v63m-x9r9-8gqp
  • npm/aws-cdk
  • npm/cdk
 AWS CDK CLI prints AWS credentials retrieved by custom credential plugins 21 Mar 2025
  • Fix available
  • Severity - 5.7 (Medium)
GHSA-v4mq-x674-ff73
  • npm/aws-cdk-lib
 AWS Cloud Development Kit (AWS CDK) IAM OIDC custom resource allows connection to unauthorized OIDC provider 17 Jan 2025
  • Fix available
  • Severity - 1.8 (Low)
GHSA-qj85-69xf-2vxq
  • npm/aws-cdk
 AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template 27 Aug 2024
  • Fix available
  • Severity - 5.3 (Medium)
MAL-2024-1791
  • npm/aws-ecs-devops-using-aws-cdk
 Malicious code in aws-ecs-devops-using-aws-cdk (npm) 25 Jun 2024
  • No fix available
GHSA-rx28-r23p-2qc3
  • npm/@aws-cdk/aws-eks
  • npm/aws-cdk-lib
 AWS CDK EKS overly permissive trust policies 19 Jun 2023
  • Fix available
  • Severity - 6.6 (Medium)