CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 10/06/2026 |
| GHSA-qc59-cxj2-c2w4 | 낮음2.2 | aws-cdk-lib's aspect order change causes different Permissions Boundary assigned to Role | 15/04/2025 |
| GHSA-qq4x-c6h6-rfxh | 보통6.5 | aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient Construct | 31/03/2025 |
| GHSA-5pq3-h73f-66hr | 낮음3.8 | AWS CDK CodePipeline: trusted entities are too broad | 24/03/2025 |
| CVE-2025-23206 | 높음8.1 | The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Users who use IAM OIDC custom resource provider package will download CA Thumbprints as part of the custom resource workflow. However, the current | 17/01/2025 |
| CVE-2023-35165 | 높음8.8 | AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages `aws-cdk-lib` 2.0.0 until 2.80.0 and `@aws-cdk/aws-eks` 1.57.0 until 1.202.0, `eks.Cluster` and `eks.FargateCluster` constructs create | 23/06/2023 |