CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 10/06/2026 |
| GHSA-qc59-cxj2-c2w4 | NIEDRIG2.2 | aws-cdk-lib's aspect order change causes different Permissions Boundary assigned to Role | 15/04/2025 |
| GHSA-qq4x-c6h6-rfxh | MITTEL6.5 | aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient Construct | 31/03/2025 |
| GHSA-5pq3-h73f-66hr | NIEDRIG3.8 | AWS CDK CodePipeline: trusted entities are too broad | 24/03/2025 |
| CVE-2025-23206 | HOCH8.1 | The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Users who use IAM OIDC custom resource provider package will download CA Thumbprints as part of the custom resource workflow. However, the current | 17/01/2025 |
| CVE-2023-35165 | HOCH8.8 | AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages `aws-cdk-lib` 2.0.0 until 2.80.0 and `@aws-cdk/aws-eks` 1.57.0 until 1.202.0, `eks.Cluster` and `eks.FargateCluster` constructs create | 23/06/2023 |