Skip to content
OpenAdvisories

Package · npm

aws-cdk

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2025-2598 Public exploit

    AWS CDK CLI prints AWS credentials retrieved by custom credential plugins

    When the AWS Cloud Development Kit (AWS CDK) Command Line Interface (AWS CDK CLI) is used with a credential plugin which returns an expiration property with the retrieved AWS credentials, the credentials are printed to the console output. To mitigate this iss…

    AWS Cloud Development Kit Command Line Interface aws-cdk cdk npm
  • Medium 6.4
    CVE-2024-45037

    AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template

    The AWS Cloud Development Kit (CDK) is an open-source framework for defining cloud infrastructure using code. Customers use it to create their own applications which are converted to AWS CloudFormation templates during deployment to a customer’s AWS account. …

    AWS AWS CDK aws-cdk npm