AWS CDK CodeBuild S3 Log Encryption Boolean Inversion in github.com/aws/aws-cdk-go/awscdk

GHSA-464c-974j-9xm6 · GO-2026-6093 · Published 18/08/2026 · updated 18/08/2026

In short

GO-2026-6093 is a not yet rated vulnerability affecting github.com/aws/aws-cdk-go/awscdk, github.com/aws/aws-cdk-go/awscdk/v2.
Fix: update to 2.253.0 or later.

Package	Affected versions	Patched versions
github.com/aws/aws-cdk-go/awscdk Go	`≥ 1.175.0-devpreview`	No fix yet
github.com/aws/aws-cdk-go/awscdk/v2 Go	`< 2.253.0`	`2.253.0`

Running one of these products? Scan your site to see whether it exposes a vulnerable version.