Skip to content

Product

aws-amplify @aws-amplify/cli vulnerabilities

1 published CVE affecting aws-amplify @aws-amplify/cli, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest aws-amplify @aws-amplify/cli CVEs

Newest publication first

  1. CVE-2024-28056 AWS Amplify CLI has incorrect trust policy management

    Published
    CriticalCVSS 9.8 EPSS 1.7%

    Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify projects. When the Authentication component is removed from an Amplify project, a Condition property is removed but "Effect":"Allow" remains present, and conseq...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.