Skip to content
OpenAdvisories

Product · AWS

projen

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.8
    CVE-2026-89066

    OS command injection in the task synthesis component in projen

    Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackers to execute arbitrary commands on a developer workstation or continuous integration runner via sh…

    AWS projen
  • High 7.1
    CVE-2026-89065

    Relative path traversal in the generated file manifest cleanup component in projen

    Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-dependent attackers to recursively delete files and directories outside the project directory that are writable by the environment running p…

    AWS projen