Aws Cloud Development Kit vulnerabilities

2 known vulnerabilities in Aws Cloud Development Kit from Amazon. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  aws-cdk: Improper Verification of Cryptographic Signature

  CVE-2025-23206Jan 17, 2025AWS

  The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Users who use IAM OIDC custom resource provider package will download CA Thumbprints as

• 8.8 High severity

  aws-cdk: Incorrect Authorization

  CVE-2023-35165Jun 23, 2023AWS

  AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages `aws-cdk-lib` 2.0.0 until 2.80.0 and `@aws-cdk/aws-eks` 1.57.0 until 1.202.