aws/aws-cdk Security Advisories | GitStock

low2026-07-24

AWS CDK CodeBuild S3 Log Encryption Boolean Inversion

GHSA-464c-974j-9xm6

high2026-07-21

aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling

GHSA-vcrf-j523-4mrf · CVE-2026-13760

high2026-06-15

aws-cdk-lib: OS Command Injection in NodejsFunction Bundling

GHSA-999r-qq7v-r334 · CVE-2026-11417

low2025-04-15

aws-cdk-lib's aspect order change causes different Permissions Boundary assigned to Role

GHSA-qc59-cxj2-c2w4

medium2025-03-31

aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient Construct

GHSA-qq4x-c6h6-rfxh

low2025-03-24

AWS CDK CodePipeline: trusted entities are too broad

GHSA-5pq3-h73f-66hr

medium2025-03-21

AWS CDK CLI prints AWS credentials retrieved by custom credential plugins

GHSA-v63m-x9r9-8gqp · CVE-2025-2598

low2025-01-17

AWS Cloud Development Kit (AWS CDK) IAM OIDC custom resource allows connection to unauthorized OIDC provider

GHSA-v4mq-x674-ff73 · CVE-2025-23206

medium2024-08-27

AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template

GHSA-qj85-69xf-2vxq · CVE-2024-45037

medium2023-06-19

AWS CDK EKS overly permissive trust policies

GHSA-rx28-r23p-2qc3 · CVE-2023-35165