jsii vulnerabilities

1 known vulnerability in jsii from AWS. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  jsii: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-15895Jul 15, 2026AWSEPSS 1.08%

  OS command injection in the npm package loading component in AWS jsii-diff before 1.131.0 might allow context-dependent attackers to execute arbitrary commands via crafted package specifiers passed to the npm: source argument. To mitigate this issue, users sho