projen vulnerabilities

2 known vulnerabilities in projen from AWS. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  projen: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-89066Sep 11, 2026AWS

  Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackers to execute arbitrary commands on a developer workstation or continuous integration runner via she

• 7.1 High severity

  projen: Relative Path Traversal

  CVE-2026-89065Sep 11, 2026AWS

  Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-dependent attackers to recursively delete files and directories outside the project directory that are writable by the environment running pr