Skip to content

Product

AWS diagram-as-code vulnerabilities

1 published CVE affecting AWS diagram-as-code, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest AWS diagram-as-code CVEs

Newest publication first

  1. CVE-2026-81838 Zip Slip Arbitrary File Write in AWS diagram-as-code (awsdac)

    Published
    MediumCVSS 6.8 EPSS 0.20%

    A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 through 0.23 can allow a third party to write arbitrary files to the local filesystem via crafted zip entry names containing path traversal sequences. This could a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.