Skip to content
OpenAdvisories

Product · AWS

AWS CDK

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-45037

    AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template

    The AWS Cloud Development Kit (CDK) is an open-source framework for defining cloud infrastructure using code. Customers use it to create their own applications which are converted to AWS CloudFormation templates during deployment to a customer’s AWS account. …

    AWS AWS CDK aws-cdk npm
  • Medium 6.6
    CVE-2023-35165

    AWS CDK EKS overly permissive trust policies

    AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages `aws-cdk-lib` 2.0.0 until 2.80.0 and `@aws-cdk/aws-eks` 1.57.0 until 1.202…

    AWS AWS CDK aws-cdk-lib @aws-cdk/aws-eks npm