Skip to content
OpenAdvisories

Product · AWS

@amazon-codecatalyst/blueprints.blueprint

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.0

    OS command injection in the Amazon CodeCatalyst blueprints SDK

    Improper neutralization of special elements used in an OS command (CWE-78) in the blueprint resynthesis framework in Amazon Web Services codecatalyst-blueprints before 0.3.156 might allow a user with permission to commit to a repository in the project to exec…