Skip to content
OpenAdvisories

Package · npm

jsii-diff

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.8
    CVE-2026-15895

    OS command injection in jsii-diff in AWS jsii

    OS command injection in the npm package loading component in AWS jsii-diff before 1.131.0 might allow context-dependent attackers to execute arbitrary commands via crafted package specifiers passed to the npm: source argument. To mitigate this issue, users sh…

    AWS jsii jsii-diff npm