AW
Product
aws-cdk
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add aws-cdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-35165 | 8.8 | Jun 23 | AWS CDK EKS overly permissive trust policies Affected: aws-cdk-lib >= 2.0.0, < 2.80.0; @aws-cdk/aws-eks >= 1.57.0, < 1.202.0 |
| CVE-2025-23206 | 8.1 | Jan 17 | IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk Affected: < 2.177.0 |
| CVE-2026-13760 | 7.3 | Jul 1 | OS Command Injection in aws-cdk-lib Docker Bundling Affected: before 2.260.0 |
| CVE-2024-45037 | 6.4 | Aug 27 | AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template Affected: >= 2.142.0, < 2.148.1 |
Showing 4