aws-cdk-lib has 3 CVEs on record. The median CVSS is 7.3 (high).
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 3
3
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
aws-cdk-lib vulnerabilities
CVEs affecting aws-cdk-lib, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
GHSA-464c-974j-9xm6Low· 3.3AWS CDK CodeBuild S3 Log Encryption Boolean Inversion
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion
▾ Sunlitaws-cdk-lib · aws-cdk-libvia OSV
CVE-2026-13760High· 7.3aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling
aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling
▾ Twilightaws-cdk-lib · aws-cdk-libEPSS 1.2%via GHSA
CVE-2026-11417High· 7.3PoCaws-cdk-lib: OS Command Injection in NodejsFunction Bundling
aws-cdk-lib: OS Command Injection in NodejsFunction Bundling
▾ Midnightaws-cdk-lib · aws-cdk-libEPSS 0.99%via GHSA