AW
Product
aws-cdk
by aws · last CVE Jul 1, 2026
3
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch

Add aws-cdk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-23206
8.1
0%
Jan 17
IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk
Affected: < 2.177.0
CVE-2026-13760
7.3
1%
Jul 1
OS Command Injection in aws-cdk-lib Docker Bundling
Affected: before 2.260.0
Showing 2