{"id":"GO-2026-6093","aliases":["GHSA-464c-974j-9xm6"],"title":"AWS CDK CodeBuild S3 Log Encryption Boolean Inversion in github.com/aws/aws-cdk-go/awscdk","summary":"AWS CDK CodeBuild S3 Log Encryption Boolean Inversion in github.com/aws/aws-cdk-go/awscdk","severity":"none","vendor":"aws","product":"github.com/aws/aws-cdk-go/awscdk","ecosystem":"go","affected":["github.com/aws/aws-cdk-go/awscdk >= 1.175.0-devpreview","github.com/aws/aws-cdk-go/awscdk/v2 < 2.253.0"],"patched":["github.com/aws/aws-cdk-go/awscdk/v2 2.253.0"],"published":"2026-08-18","updated":"2026-08-18","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GO-2026-6093","references":[{"url":"https://github.com/aws/aws-cdk/security/advisories/GHSA-464c-974j-9xm6"},{"url":"https://github.com/aws/aws-cdk/commit/40319185dc645d2afc6acf1d25547a86250e97af"},{"url":"https://github.com/aws/aws-cdk/pull/37761"},{"url":"https://github.com/aws/aws-cdk/releases/tag/v2.253.0"}],"tags":["osv","go"],"ingestedAt":"2026-08-18T19:21:37.391Z","slug":"GO-2026-6093","body":"## Overview\n\nAWS CDK CodeBuild S3 Log Encryption Boolean Inversion in github.com/aws/aws-cdk-go/awscdk\n\n## Affected packages\n\n- `github.com/aws/aws-cdk-go/awscdk >= 1.175.0-devpreview`\n- `github.com/aws/aws-cdk-go/awscdk/v2 < 2.253.0`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `github.com/aws/aws-cdk-go/awscdk/v2 2.253.0`","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}