CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 10/06/2026 |
| GHSA-qc59-cxj2-c2w4 | 低危2.2 | aws-cdk-lib's aspect order change causes different Permissions Boundary assigned to Role | 15/04/2025 |
| GHSA-qq4x-c6h6-rfxh | 中危6.5 | aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient Construct | 31/03/2025 |
| GHSA-5pq3-h73f-66hr | 低危3.8 | AWS CDK CodePipeline: trusted entities are too broad | 24/03/2025 |
| CVE-2025-23206 | 高危8.1 | The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Users who use IAM OIDC custom resource provider package will download CA Thumbprints as part of the custom resource workflow. However, the current | 17/01/2025 |
| CVE-2023-35165 | 高危8.8 | AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages `aws-cdk-lib` 2.0.0 until 2.80.0 and `@aws-cdk/aws-eks` 1.57.0 until 1.202.0, `eks.Cluster` and `eks.FargateCluster` constructs create | 23/06/2023 |