pkg:npm/aws-cdk-lib

All known vulnerabilities

• HIGH7.3CVE-2026-11417aws-cdk-lib: OS Command Injection in NodejsFunction Bundling
  from 0, < 2.246.0
• MEDIUM6.6CVE-2023-35165AWS CDK EKS overly permissive trust policies
  >= 2.0.0, < 2.80.0
• —CVE-2025-23206AWS Cloud Development Kit (AWS CDK) IAM OIDC custom resource allows connection to unauthorized OIDC provider
  from 0, < 2.177.0