8 Total advisories
8 Vulnerabilities
0 Malware
Vulnerabilities
LOW 3.3
GHSA-464c-974j-9xm6
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion
HIGH 7.3
CVE-2026-13760
aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling
HIGH 7.3
CVE-2026-11417
aws-cdk-lib: OS Command Injection in NodejsFunction Bundling
LOW 2.2
GHSA-qc59-cxj2-c2w4
aws-cdk-lib's aspect order change causes different Permissions Boundary assigned to Role
LOW 3.8
GHSA-5pq3-h73f-66hr
AWS CDK CodePipeline: trusted entities are too broad
MEDIUM 6.5
GHSA-qq4x-c6h6-rfxh
aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient Construct
UNKNOWN
CVE-2025-23206
AWS Cloud Development Kit (AWS CDK) IAM OIDC custom resource allows connection to unauthorized OIDC provider
MEDIUM 6.6
CVE-2023-35165
AWS CDK EKS overly permissive trust policies
Ready to move
Start Securing
Free, no credit card | First findings in minutes