Skip to content
OpenAdvisories

Product · AWS

AWS CDK

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-13760

    OS Command Injection in aws-cdk-lib Docker Bundling

    OS command injection in the NodejsFunction Docker bundling pipeline (OsCommand helper) in AWS aws-cdk-lib on all platforms might allow a actor who controls dependency version strings in a project's package.json file to execute arbitrary commands on the host r…

    AWS AWS CDK aws-cdk-lib npm