VendorsAmazonaws_cloud_development_kitall versions
Vulnerabilities

Amazon AWS Cloud Development Kit (AWS CDK)

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2023-35165
AWS CDK EKS overly permissive trust policies
Published 2023-06-23 · Modified
8.8EPSS 0.009
CVE-2025-23206
IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk
Published 2025-01-17 · Modified
8.1EPSS 0.003
CVE-2024-45037
AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template
Published 2024-08-27 · Analyzed
6.4EPSS 0.003
CVE-2025-2598
AWS CDK CLI prints AWS credentials retrieved by custom credential plugins
Published 2025-03-21 · Modified
5.7EPSS 0.003