Vulnerabilidades do AWS Aws-cdk-lib
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam AWS Aws-cdk-lib: 1 registro(s), com versões afetadas e correções.
CVE-2026-107608
Média · 5.5
CWE-59 08/10/2026
Improper link resolution in asset bundling output handling in aws-cdk-lib
Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to cause files from the build host to be published as the deployed asset.
To remediate this issue, users should upgrade to version 2.267.0 or later.