CICD-toolchain-for-serverless-applications vulnerabilities

CVEs whose affected-version data names the CICD-toolchain-for-serverless-applications package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112407High· 8.8

today

Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications

Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with push access to the application source repository to escalate privileges and ac…

▾ TwilightAWS · CICD-toolchain-for-serverless-applicationsvia CVEORG