Product

aws-amplify @aws-amplify/codegen-ui-react vulnerabilities

1 published CVE affecting aws-amplify @aws-amplify/codegen-ui-react, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 1
High: 0
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest aws-amplify @aws-amplify/codegen-ui-react CVEs

Newest publication first

CVE-2025-4318 Input validation issue in AWS Amplify Studio UI component properties
Published 2025-05-05

CriticalCVSS 9.0 EPSS 0.99%

The AWS Amplify Studio UI component property expressions in the aws-amplify/amplify-codegen-ui package lack input validation. This could potentially allow an authenticated user who has access to create or modify components to run arbitrary JavaScript code during the component ren...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

aws-amplify @aws-amplify/codegen-ui-react vulnerabilities

Latest aws-amplify @aws-amplify/codegen-ui-react CVEs

CVE-2025-4318 Input validation issue in AWS Amplify Studio UI component properties