amazon aws cloud development kit vulnerabilities (CVE)

CVE records published for amazon aws cloud development kit, newest first. Follow to get an email when a new one appears.

2 results

5.5Medium

CVE-2025-2598 1 year ago

AWS CDK CLI prints AWS credentials retrieved by custom credential plugins

AWS Cloud Development Kit Command Line Interface

When the AWS Cloud Development Kit (AWS CDK) Command Line Interface (AWS CDK CLI) is used with a credential plugin which returns an expiration property with the retrieved AWS credentials, the credentials are printed to the console output. To mitigate this iss…

1.8Low

CVE-2025-23206 1 year ago

IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk

aws aws-cdk

The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Users who use IAM OIDC custom resource provider package will download CA Thumbprints a…