Skip to content
OpenAdvisories

Package · npm

@aws-amplify/cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2024-28056

    AWS Amplify CLI has incorrect trust policy management

    Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify projects. When the Authentication component is removed from an Amplify project, a Condition property is removed but "Effect":"Allow" remain…

    @aws-amplify/cli npm