Login Request a demo
AC
Product
Aws Cloud Development Kit
by Amazon · last CVE Mar 21, 2025
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 2Medium 2Low 0
Severity
All severities4Critical0High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Aws Cloud Development Kit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-35165
8.8
1%
Jun 23
AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation
Affected: 1.57.0 before 1.202.0; 2.0.0 before 2.80.0
CVE-2025-23206
8.1
0%
Jan 17
IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk
Affected: before 2.177.0
CVE-2024-45037
6.4
0%
Aug 27
AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template
Affected: 2.142.0 before 2.148.1
CVE-2025-2598
5.5
0%
Mar 21
AWS CDK CLI prints AWS credentials retrieved by custom credential plugins
Affected: 2.172.0 before 2.178.2
Showing 4