Skip to content
OpenAdvisories

Package · npm

aws-cdk-lib

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    GHSA-qq4x-c6h6-rfxh

    aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient Construct

    ### Summary The [AWS Cloud Development Kit (CDK)](https://aws.amazon.com/cdk/) is an open-source framework for defining cloud infrastructure using code. Customers use it to create their own applications which are converted to AWS CloudFormation templates duri…

    aws-cdk-lib npm
  • Medium 6.6
    CVE-2023-35165

    AWS CDK EKS overly permissive trust policies

    AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages `aws-cdk-lib` 2.0.0 until 2.80.0 and `@aws-cdk/aws-eks` 1.57.0 until 1.202…

    AWS AWS CDK aws-cdk-lib @aws-cdk/aws-eks npm