Product

aws-amplify/data-construct vulnerabilities

1 published CVE affecting aws-amplify/data-construct, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest aws-amplify/data-construct CVEs

Newest publication first

CVE-2026-108096 Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category
Published 2026-10-09

HighCVSS 7.1 EPSS 0.30%

Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via crafted queries. This issue has bee...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

aws-amplify/data-construct vulnerabilities

Latest aws-amplify/data-construct CVEs

CVE-2026-108096 Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category