AW
Product
aws-cdk
3
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add aws-cdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-23206 | 8.1 | Jan 17 | IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk Affected: < 2.177.0 |
| CVE-2026-13760 | 7.3 | Jul 1 | OS Command Injection in aws-cdk-lib Docker Bundling Affected: before 2.260.0 |
| CVE-2024-45037 | 6.4 | Aug 27 | AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template Affected: >= 2.142.0, < 2.148.1 |
Showing 3