aws-cdk-lib vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-13760Highaws-cdk-lib: aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling CVE-2026-11417Highaws-cdk-lib: aws-cdk-lib: OS Command Injection in NodejsFunction Bundling GHSA-QC59-CXJ2-C2W4Lowaws-cdk-lib: aws-cdk-lib's aspect order change causes different Permissions Boundary assigned to Role GHSA-QQ4X-C6H6-RFXHMediumaws-cdk-lib: aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient Construct GHSA-5PQ3-H73F-66HRLowaws-cdk-lib: AWS CDK CodePipeline: trusted entities are too broad CVE-2025-23206Lowaws-cdk-lib: AWS Cloud Development Kit (AWS CDK) IAM OIDC custom resource allows connection to unauthorized OIDC provider CVE-2023-35165Mediumaws-cdk-lib: AWS CDK EKS overly permissive trust policies

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo