Skip to content

Product

AWS Cloud Development Kit library vulnerabilities

1 published CVE affecting AWS Cloud Development Kit library, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest AWS Cloud Development Kit library CVEs

Newest publication first

  1. CVE-2026-11417 OS Command Injection in NodejsFunction Bundling in aws-cdk-lib

    Published
    HighCVSS 7.0 EPSS 0.99%

    OS command injection in the NodejsFunction local bundling pipeline in aws-cdk-lib before 2.245.0 (2.246.0 on Windows) might allow an actor who controls the value of one or more bundling properties (externalModules, define, loader, inject, or esbuildArgs) to execute arbitrary comm...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.