LOW 3.8 npm
GHSA-5pq3-h73f-66hr AWS CDK CodePipeline: trusted entities are too broad
Modified: 4/10/2025
package
npm / aws-cdk-lib
pkg:npm/aws-cdk-lib
HIGH 7.3 npm
GHSA-999r-qq7v-r334 · CVE-2026-11417 aws-cdk-lib: OS Command Injection in NodejsFunction Bundling
Modified: 6/15/2026
LOW 2.2 npm
GHSA-qc59-cxj2-c2w4 aws-cdk-lib's aspect order change causes different Permissions Boundary assigned to Role
Modified: 4/15/2025
MEDIUM 6.5 npm
GHSA-qq4x-c6h6-rfxh aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient Construct
Modified: 3/31/2025
MEDIUM 6.6 npm
GHSA-rx28-r23p-2qc3 · CVE-2023-35165 AWS CDK EKS overly permissive trust policies
Modified: 11/8/2023
LOW npm
GHSA-v4mq-x674-ff73 · CVE-2025-23206 AWS Cloud Development Kit (AWS CDK) IAM OIDC custom resource allows connection to unauthorized OIDC provider
Modified: 1/29/2025