Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

aws-cdk-lib

npm

Version 2 of the AWS Cloud Development Kit library

View on github.com · View on npmjs.org

Security Advisories for aws-cdk-lib in npm

Low
23 days ago

AWS CDK CodeBuild S3 Log Encryption Boolean Inversion GSA_kwCzR0hTQS00NjRjLTk3NGotOXhtNs4ABfq8

pypi, go, maven, nuget, npm aws-cdk.aws-codebuild, aws-cdk-lib, github.com/aws/aws-cdk-go/awscdk, software.amazon.awscdk:codebuild, Amazon.CDK.AWS.CodeBuild, @aws-cdk/aws-codebuild, github.com/aws/aws-cdk-go/awscdk/v2, software.amazon.awscdk:aws-cdk-lib, Amazon.CDK.Lib
High
26 days ago

aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling GSA_kwCzR0hTQS12Y3JmLWo1MjMtNG1yZs4ABfJJ

npm aws-cdk-lib
High
2 months ago

aws-cdk-lib: OS Command Injection in NodejsFunction Bundling GSA_kwCzR0hTQS05OTlyLXFxN3YtcjMzNM4ABYsh

npm aws-cdk-lib
Low
over 1 year ago

aws-cdk-lib's aspect order change causes different Permissions Boundary assigned to Role GSA_kwCzR0hTQS1xYzU5LWN4ajItYzJ3NM4ABGyD

npm aws-cdk-lib
Moderate
over 1 year ago

aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient Construct GSA_kwCzR0hTQS1xcTR4LWM2aDYtcmZ4aM4ABGJ2

npm aws-cdk-lib
Low
over 1 year ago

AWS CDK CodePipeline: trusted entities are too broad GSA_kwCzR0hTQS01cHEzLWg3M2YtNjZocs4ABF08

npm aws-cdk-lib
Low
over 1 year ago

AWS Cloud Development Kit (AWS CDK) IAM OIDC custom resource allows connection to unauthorized OIDC provider GSA_kwCzR0hTQS12NG1xLXg2NzQtZmY3M84ABDg8

npm aws-cdk-lib
Moderate
about 3 years ago

AWS CDK EKS overly permissive trust policies GSA_kwCzR0hTQS1yeDI4LXIyM3AtMnFjM84AAz8q

npm @aws-cdk/aws-eks, aws-cdk-lib

Filter by Severity

Low 4 Moderate 2 High 2