Skip to content
OpenAdvisories

Package · npm

aws-cdk-lib

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-13760

    OS Command Injection in aws-cdk-lib Docker Bundling

    OS command injection in the NodejsFunction Docker bundling pipeline (OsCommand helper) in AWS aws-cdk-lib on all platforms might allow a actor who controls dependency version strings in a project's package.json file to execute arbitrary commands on the host r…

    AWS AWS CDK aws-cdk-lib npm
  • High 7.3
    CVE-2026-11417 Public exploit

    OS Command Injection in NodejsFunction Bundling in aws-cdk-lib

    OS command injection in the NodejsFunction local bundling pipeline in aws-cdk-lib before 2.245.0 (2.246.0 on Windows) might allow an actor who controls the value of one or more bundling properties (externalModules, define, loader, inject, or esbuildArgs) to e…

    AWS AWS Cloud Development Kit library aws-cdk-lib npm