Skip to content
OpenAdvisories

Product · AWS

aws-cdk-lib

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-107608

    Improper link resolution in asset bundling output handling in aws-cdk-lib

    Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to cause files from the build host to be published as the deployed asset. To remediate this issue, users …

    AWS aws-cdk-lib