Skip to content
OpenAdvisories

Product · AWS

AWS CDK

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 1.8
    CVE-2025-23206

    IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk

    The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Users who use IAM OIDC custom resource provider package will download CA Thumbprints a…

    AWS AWS CDK aws-cdk-lib npm