aws-cdk-lib vulnerabilities
CVEs whose affected-version data names the aws-cdk-lib package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
GHSA-464c-974j-9xm6Low· 3.3AWS CDK CodeBuild S3 Log Encryption Boolean Inversion
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion
▾ Sunlitaws-cdk-lib · aws-cdk-libvia OSV
CVE-2026-13760High· 7.3aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling
aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling
▾ Twilightaws-cdk-lib · aws-cdk-libEPSS 1.2%via GHSA
CVE-2026-11417High· 7.3PoCaws-cdk-lib: OS Command Injection in NodejsFunction Bundling
aws-cdk-lib: OS Command Injection in NodejsFunction Bundling
▾ Midnightaws-cdk-lib · aws-cdk-libEPSS 0.99%via GHSA