aws_amplify_cli vulnerabilities

CVEs whose affected-version data names the aws_amplify_cli package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-28056Critical· 9.8

2y ago

Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify projects

Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify projects. When the Authentication component is removed from an Amplify project, a Condition property is removed but "…

▾ Midnightamazon · aws_amplify_cliEPSS 1.7%via NVD