How many aws aws-cdk CVEs are in CISA KEV?

None of aws aws-cdk's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for aws aws-cdk vulnerabilities?

Yes — 1 of aws aws-cdk's CVEs have a known public exploit.

Which versions of aws aws-cdk are affected?

640 distinct aws aws-cdk versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in aws aws-cdk CVEs?

aws aws-cdk's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-863 (Incorrect Authorization), CWE-347 (Improper Verification of Cryptographic Signature), CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere).

What is the average severity of aws aws-cdk CVEs?

The average CVSS base score across aws aws-cdk's scored CVEs is 5.9.

aws aws-cdk Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: aws aws-cdk vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Overview

aws aws-cdk has 6 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 5.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting aws aws-cdk, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of aws aws-cdk's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High3

Medium2

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of aws aws-cdk's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of aws aws-cdk's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every aws aws-cdk version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

2.0.04 CVEs
2.1.04 CVEs
2.10.04 CVEs
2.11.04 CVEs
2.12.04 CVEs
2.13.04 CVEs
2.14.04 CVEs
2.142.04 CVEs
2.142.14 CVEs
2.143.04 CVEs
2.143.14 CVEs
2.144.04 CVEs
2.145.04 CVEs
2.146.04 CVEs
2.147.04 CVEs
2.147.14 CVEs
2.147.24 CVEs
2.147.34 CVEs
2.148.04 CVEs
2.15.04 CVEs
2.16.04 CVEs
2.17.04 CVEs
2.172.04 CVEs
2.173.04 CVEs
2.173.14 CVEs
2.173.24 CVEs
2.173.34 CVEs
2.173.44 CVEs
2.174.04 CVEs
2.174.14 CVEs
2.175.04 CVEs
2.175.14 CVEs
2.176.04 CVEs
2.18.04 CVEs
2.19.04 CVEs
2.2.04 CVEs
2.20.04 CVEs
2.21.04 CVEs
2.21.14 CVEs
2.22.04 CVEs
2.23.04 CVEs
2.24.04 CVEs
2.24.14 CVEs
2.25.04 CVEs
2.26.04 CVEs
2.27.04 CVEs
2.28.04 CVEs
2.28.14 CVEs
2.29.04 CVEs
2.29.14 CVEs
2.3.04 CVEs
2.30.04 CVEs
2.31.04 CVEs
2.31.14 CVEs
2.31.24 CVEs
2.32.04 CVEs
2.32.14 CVEs
2.33.04 CVEs
2.34.04 CVEs
2.34.14 CVEs
2.34.24 CVEs
2.35.04 CVEs
2.36.04 CVEs
2.37.04 CVEs
2.37.14 CVEs
2.38.04 CVEs
2.38.14 CVEs
2.39.04 CVEs
2.39.14 CVEs
2.4.04 CVEs
2.40.04 CVEs
2.41.04 CVEs
2.42.04 CVEs
2.42.14 CVEs
2.43.04 CVEs
2.43.14 CVEs
2.44.04 CVEs
2.45.04 CVEs
2.46.04 CVEs
2.47.04 CVEs
2.48.04 CVEs
2.49.04 CVEs
2.49.14 CVEs
2.5.04 CVEs
2.50.04 CVEs
2.51.04 CVEs
2.51.14 CVEs
2.52.04 CVEs
2.52.14 CVEs
2.53.04 CVEs
2.54.04 CVEs
2.55.04 CVEs
2.55.14 CVEs
2.56.04 CVEs
2.56.14 CVEs
2.57.04 CVEs
2.58.04 CVEs
2.58.14 CVEs
2.59.04 CVEs
2.6.04 CVEs
2.60.04 CVEs
2.61.04 CVEs
2.61.14 CVEs
2.62.04 CVEs
2.62.14 CVEs
2.62.24 CVEs
2.63.04 CVEs
2.63.14 CVEs
2.63.24 CVEs
2.64.04 CVEs
2.65.04 CVEs
2.66.04 CVEs
2.66.14 CVEs
2.67.04 CVEs
2.68.04 CVEs
2.69.04 CVEs
2.7.04 CVEs
2.70.04 CVEs
2.72.04 CVEs
2.72.14 CVEs
2.73.04 CVEs
2.74.04 CVEs
2.75.04 CVEs
2.75.14 CVEs
2.76.04 CVEs
2.77.04 CVEs
2.78.04 CVEs
2.79.04 CVEs
2.79.14 CVEs
2.8.04 CVEs
2.9.04 CVEs
0.10.03 CVEs
0.11.03 CVEs
0.12.03 CVEs
0.13.03 CVEs
0.14.03 CVEs
0.14.13 CVEs
0.15.03 CVEs
0.15.13 CVEs
0.15.23 CVEs
0.16.03 CVEs
0.17.03 CVEs
0.18.03 CVEs
0.18.13 CVEs
0.19.03 CVEs
0.20.03 CVEs
0.21.03 CVEs
0.22.03 CVEs
0.23.03 CVEs
0.24.03 CVEs
0.24.13 CVEs
0.25.03 CVEs
0.25.23 CVEs
0.25.33 CVEs
0.26.03 CVEs
0.27.03 CVEs
0.28.03 CVEs
0.29.03 CVEs
0.30.03 CVEs
0.31.03 CVEs
0.32.03 CVEs
0.33.03 CVEs
0.34.03 CVEs
0.35.03 CVEs
0.36.03 CVEs
0.36.13 CVEs
0.36.23 CVEs
0.37.03 CVEs
0.38.03 CVEs
0.39.03 CVEs
0.7.0-beta3 CVEs
0.7.1-beta3 CVEs
0.7.2-beta3 CVEs
0.7.3-beta3 CVEs
0.7.4-beta3 CVEs
0.8.03 CVEs
0.8.13 CVEs
0.8.23 CVEs
0.9.03 CVEs
0.9.13 CVEs
0.9.23 CVEs
1.0.03 CVEs
1.1.03 CVEs
1.10.03 CVEs
1.11.03 CVEs
1.12.03 CVEs
1.13.03 CVEs
1.13.13 CVEs
1.14.03 CVEs
1.15.03 CVEs
1.16.03 CVEs
1.16.13 CVEs
1.17.03 CVEs
1.17.13 CVEs
1.18.03 CVEs
1.19.03 CVEs
1.2.03 CVEs
1.3.03 CVEs
1.4.03 CVEs
1.5.03 CVEs
1.6.03 CVEs
1.6.13 CVEs
1.7.03 CVEs
1.8.03 CVEs
1.9.03 CVEs
2.0.0-alpha.103 CVEs
2.0.0-alpha.113 CVEs
2.0.0-alpha.123 CVEs
2.0.0-alpha.133 CVEs
2.0.0-alpha.143 CVEs
2.0.0-rc.13 CVEs
2.0.0-rc.103 CVEs
2.0.0-rc.113 CVEs
2.0.0-rc.123 CVEs
2.0.0-rc.133 CVEs
2.0.0-rc.143 CVEs
2.0.0-rc.153 CVEs
2.0.0-rc.163 CVEs
2.0.0-rc.173 CVEs
2.0.0-rc.183 CVEs
2.0.0-rc.193 CVEs
2.0.0-rc.203 CVEs
2.0.0-rc.213 CVEs
2.0.0-rc.223 CVEs
2.0.0-rc.233 CVEs
2.0.0-rc.243 CVEs
2.0.0-rc.253 CVEs
2.0.0-rc.263 CVEs
2.0.0-rc.273 CVEs
2.0.0-rc.283 CVEs
2.0.0-rc.293 CVEs
2.0.0-rc.33 CVEs
2.0.0-rc.303 CVEs
2.0.0-rc.313 CVEs
2.0.0-rc.323 CVEs
2.0.0-rc.333 CVEs
2.0.0-rc.43 CVEs
2.0.0-rc.53 CVEs
2.0.0-rc.63 CVEs
2.0.0-rc.73 CVEs
2.0.0-rc.83 CVEs
2.0.0-rc.93 CVEs
2.100.03 CVEs
2.101.03 CVEs
2.101.13 CVEs
2.102.03 CVEs
2.102.13 CVEs
2.103.03 CVEs
2.103.13 CVEs
2.104.03 CVEs
2.105.03 CVEs
2.106.03 CVEs
2.106.13 CVEs
2.107.03 CVEs
2.108.03 CVEs
2.108.13 CVEs
2.109.03 CVEs
2.110.03 CVEs
2.110.13 CVEs
2.111.03 CVEs
2.112.03 CVEs
2.113.03 CVEs
2.114.03 CVEs
2.114.13 CVEs
2.115.03 CVEs
2.116.03 CVEs
2.116.13 CVEs
2.117.03 CVEs
2.118.03 CVEs
2.119.03 CVEs
2.120.03 CVEs
2.121.03 CVEs
2.121.13 CVEs
2.122.03 CVEs
2.123.03 CVEs
2.124.03 CVEs
2.125.03 CVEs
2.126.03 CVEs
2.127.03 CVEs
2.128.03 CVEs
2.129.03 CVEs
2.130.03 CVEs
2.131.03 CVEs
2.132.03 CVEs
2.132.13 CVEs
2.133.03 CVEs
2.134.03 CVEs
2.135.03 CVEs
2.136.03 CVEs
2.136.13 CVEs
2.137.03 CVEs
2.138.03 CVEs
2.139.03 CVEs
2.139.13 CVEs
2.140.03 CVEs
2.141.03 CVEs
2.148.13 CVEs
2.149.03 CVEs
2.150.03 CVEs
2.151.03 CVEs
2.151.13 CVEs
2.152.03 CVEs
2.153.03 CVEs
2.154.03 CVEs
2.154.13 CVEs
2.155.03 CVEs
2.156.03 CVEs
2.157.03 CVEs
2.158.03 CVEs
2.159.03 CVEs
2.159.13 CVEs
2.160.03 CVEs
2.161.03 CVEs
2.161.13 CVEs
2.162.03 CVEs
2.162.13 CVEs
2.163.03 CVEs
2.163.13 CVEs
2.164.03 CVEs
2.164.13 CVEs
2.165.03 CVEs
2.166.03 CVEs
2.167.03 CVEs
2.167.13 CVEs
2.167.23 CVEs
2.168.03 CVEs
2.169.03 CVEs
2.170.03 CVEs
2.171.03 CVEs
2.171.13 CVEs
2.177.03 CVEs
2.178.03 CVEs
2.178.13 CVEs
2.80.03 CVEs
2.81.03 CVEs
2.82.03 CVEs
2.83.03 CVEs
2.83.13 CVEs
2.84.03 CVEs
2.85.03 CVEs
2.86.03 CVEs
2.87.03 CVEs
2.88.03 CVEs
2.89.03 CVEs
2.90.03 CVEs
2.91.03 CVEs
2.92.03 CVEs
2.93.03 CVEs
2.94.03 CVEs
2.95.03 CVEs
2.95.13 CVEs
2.96.03 CVEs
2.96.13 CVEs
2.96.23 CVEs
2.97.03 CVEs
2.97.13 CVEs
2.98.03 CVEs
2.99.03 CVEs
2.99.13 CVEs
2.178.22 CVEs
2.179.02 CVEs
2.180.02 CVEs
2.181.02 CVEs
2.181.12 CVEs
2.182.02 CVEs
2.183.02 CVEs
2.184.02 CVEs
2.184.12 CVEs
2.185.02 CVEs
2.186.02 CVEs
2.187.02 CVEs
2.188.02 CVEs
2.189.02 CVEs
2.189.12 CVEs
2.190.02 CVEs
2.191.02 CVEs
2.192.02 CVEs
2.193.02 CVEs
2.194.02 CVEs
2.195.02 CVEs
2.196.02 CVEs
2.196.12 CVEs
2.197.02 CVEs
2.198.02 CVEs
2.199.02 CVEs
2.200.02 CVEs
2.200.12 CVEs
2.200.22 CVEs
2.201.02 CVEs
2.202.02 CVEs
2.203.02 CVEs
2.203.12 CVEs
2.204.02 CVEs
2.205.02 CVEs
2.206.02 CVEs
2.207.02 CVEs
2.208.02 CVEs
2.209.02 CVEs
2.209.12 CVEs
2.210.02 CVEs
2.211.02 CVEs
2.212.02 CVEs
2.213.02 CVEs
2.214.02 CVEs
2.215.02 CVEs
2.216.02 CVEs
2.217.02 CVEs
2.218.02 CVEs
2.219.02 CVEs
2.220.02 CVEs
2.221.02 CVEs
2.221.12 CVEs
2.222.02 CVEs
2.223.02 CVEs
2.224.02 CVEs
2.225.02 CVEs
2.226.02 CVEs
2.227.02 CVEs
2.228.02 CVEs
2.229.02 CVEs
2.229.12 CVEs
2.230.02 CVEs
2.231.02 CVEs
2.232.02 CVEs
2.232.12 CVEs
2.232.22 CVEs
2.233.02 CVEs
2.234.02 CVEs
2.234.12 CVEs
2.235.02 CVEs
2.235.12 CVEs
2.236.02 CVEs
2.237.02 CVEs
2.237.12 CVEs
2.238.02 CVEs
2.239.02 CVEs
2.240.02 CVEs
2.241.02 CVEs
2.242.02 CVEs
2.243.02 CVEs
2.244.02 CVEs
@aws-cdk/aws-eks >= 1.57.0, < 1.202.01 CVE
1.100.01 CVE
1.101.01 CVE
1.102.01 CVE
1.103.01 CVE
1.104.01 CVE
1.105.01 CVE
1.106.01 CVE
1.106.11 CVE
1.107.01 CVE
1.108.01 CVE
1.108.11 CVE
1.109.01 CVE
1.110.01 CVE
1.110.11 CVE
1.111.01 CVE
1.112.01 CVE
1.113.01 CVE
1.114.01 CVE
1.115.01 CVE
1.116.01 CVE
1.117.01 CVE
1.118.01 CVE
1.119.01 CVE
1.120.01 CVE
1.121.01 CVE
1.122.01 CVE
1.123.01 CVE
1.124.01 CVE
1.125.01 CVE
1.126.01 CVE
1.127.01 CVE
1.128.01 CVE
1.129.01 CVE
1.130.01 CVE
1.131.01 CVE
1.132.01 CVE
1.133.01 CVE
1.134.01 CVE
1.135.01 CVE
1.136.01 CVE
1.137.01 CVE
1.138.01 CVE
1.138.11 CVE
1.138.21 CVE
1.139.01 CVE
1.140.01 CVE
1.141.01 CVE
1.142.01 CVE
1.143.01 CVE
1.144.01 CVE
1.145.01 CVE
1.146.01 CVE
1.147.01 CVE
1.148.01 CVE
1.149.01 CVE
1.150.01 CVE
1.151.01 CVE
1.152.01 CVE
1.153.01 CVE
1.153.11 CVE
1.154.01 CVE
1.155.01 CVE
1.156.01 CVE
1.156.11 CVE
1.157.01 CVE
1.158.01 CVE
1.159.01 CVE
1.160.01 CVE
1.161.01 CVE
1.162.01 CVE
1.163.01 CVE
1.163.11 CVE
1.163.21 CVE
1.164.01 CVE
1.165.01 CVE
1.166.11 CVE
1.167.01 CVE
1.168.01 CVE
1.169.01 CVE
1.170.01 CVE
1.170.11 CVE
1.171.01 CVE
1.172.01 CVE
1.173.01 CVE
1.174.01 CVE
1.175.01 CVE
1.176.01 CVE
1.177.01 CVE
1.178.01 CVE
1.179.01 CVE
1.180.01 CVE
1.181.01 CVE
1.181.11 CVE
1.182.01 CVE
1.183.01 CVE
1.184.01 CVE
1.184.11 CVE
1.185.01 CVE
1.186.01 CVE
1.186.11 CVE
1.187.01 CVE
1.188.01 CVE
1.189.01 CVE
1.190.01 CVE
1.191.01 CVE
1.192.01 CVE
1.193.01 CVE
1.194.01 CVE
1.195.01 CVE
1.196.01 CVE
1.197.01 CVE
1.198.01 CVE
1.198.11 CVE
1.199.01 CVE
1.200.01 CVE
1.201.01 CVE
1.57.01 CVE
1.58.01 CVE
1.59.01 CVE
1.60.01 CVE
1.61.01 CVE
1.61.11 CVE
1.62.01 CVE
1.63.01 CVE
1.64.01 CVE
1.64.11 CVE
1.65.01 CVE
1.66.01 CVE
1.67.01 CVE
1.68.01 CVE
1.69.01 CVE
1.70.01 CVE
1.71.01 CVE
1.72.01 CVE
1.73.01 CVE
1.74.01 CVE
1.75.01 CVE
1.76.01 CVE
1.77.01 CVE
1.78.01 CVE
1.79.01 CVE
1.80.01 CVE
1.81.01 CVE
1.82.01 CVE
1.83.01 CVE
1.84.01 CVE
1.85.01 CVE
1.86.01 CVE
1.87.01 CVE
1.87.11 CVE
1.88.01 CVE
1.89.01 CVE
1.90.01 CVE
1.90.11 CVE
1.91.01 CVE
1.92.01 CVE
1.93.01 CVE
1.94.01 CVE
1.94.11 CVE
1.95.01 CVE
1.95.11 CVE
1.95.21 CVE
1.96.01 CVE
1.97.01 CVE
1.98.01 CVE
1.99.01 CVE
2.245.01 CVE
2.246.01 CVE
2.247.01 CVE
2.248.01 CVE
2.249.01 CVE
2.250.01 CVE
2.251.01 CVE
2.252.01 CVE
2.253.01 CVE
2.253.11 CVE
2.254.01 CVE
2.255.01 CVE
2.256.01 CVE
2.256.11 CVE
2.257.01 CVE
2.258.01 CVE
2.258.11 CVE
2.259.01 CVE
aws-cdk-lib >= 2.0.0, < 2.80.01 CVE

Version ranges

< 2.177.01 CVE
>= 2.142.0, < 2.148.11 CVE
2.142.0 <= v < 2.148.11 CVE
2.172.0 <= v < 2.178.21 CVE

Fixed in

2.148.11 CVE
2.178.21 CVE
283525d445228f7658010dbc1c7f7206476e921a1 CVE
776e79dc2e9b2c300d46c099c07d25764f745b571 CVE
89c49cc98b08c87c1871e8fd93679cc271c1297e1 CVE
a987f75109aff2ecc1ec1ac063edeb96232858aa1 CVE
b396961272695cd70ac183fdaf842ffb48f5d91f1 CVE
bbdb16ad65b1217901f92782a74a6f13222cd6841 CVE
e986226ff1ceff3152c34041153e2debdc7026651 CVE

Find a version

6 CVEs

Sort

OS Command Injection in aws-cdk-lib Docker Bundling
CVE-2026-13760
Patch
CWE-78
High · CVSS 7.0
EPSS 0.6% (46th pct)2026-07-01
OS Command Injection in NodejsFunction Bundling in aws-cdk-lib
CVE-2026-11417
Public exploit
Patch
CWE-78
High · CVSS 7.0
EPSS 0.9% (57th pct)2026-06-10
AWS CDK CLI prints AWS credentials retrieved by custom credential plugins
CVE-2025-2598
Patch
CWE-497
Medium · CVSS 5.7
EPSS 0.3% (18th pct)2025-03-21
IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk
CVE-2025-23206
Patch
CWE-347
Low · CVSS 1.8
EPSS 0.3% (24th pct)2025-01-17
Medium vulnerability · 2024-08-27
CVE-2024-45037
Patch
CWE-863
Medium · CVSS 5.3
EPSS 0.3% (24th pct)2024-08-27
High vulnerability · 2023-06-23
CVE-2023-35165
Patch
CWE-863
High · CVSS 8.8
EPSS 0.9% (56th pct)2023-06-23

Common weakness types

The CWE weakness categories most often found in aws aws-cdk CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many aws aws-cdk CVEs were published each year.

2023

1

2024

1

2025

2

2026

2

Other aws products

Browse vulnerabilities for other products by aws.

amazon-freertos14 CVEs FreeRTOS-Plus-TCP8 CVEs sagemaker7 CVEs sagemaker-python-sdk7 CVEs tough7 CVEs Kiro IDE5 CVEs res5 CVEs amazon-redshift-jdbc-driver4 CVEs

All aws vulnerabilities

Frequently asked questions

Common questions about aws aws-cdk vulnerabilities.

How many CVEs does aws aws-cdk have?: aws aws-cdk has 6 published CVE records since 2023.
How many aws aws-cdk CVEs are in CISA KEV?: None of aws aws-cdk's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for aws aws-cdk vulnerabilities?: Yes — 1 of aws aws-cdk's CVEs have a known public exploit.
Which versions of aws aws-cdk are affected?: 640 distinct aws aws-cdk versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in aws aws-cdk CVEs?: aws aws-cdk's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-863 (Incorrect Authorization), CWE-347 (Improper Verification of Cryptographic Signature), CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere).
What is the average severity of aws aws-cdk CVEs?: The average CVSS base score across aws aws-cdk's scored CVEs is 5.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.