amazon aws cloud development kit güvenlik açıkları (CVE)

amazon aws cloud development kit için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç

5.5Orta

CVE-2025-2598 1 yıl önce

AWS CDK CLI prints AWS credentials retrieved by custom credential plugins

AWS Cloud Development Kit Command Line Interface

When the AWS Cloud Development Kit (AWS CDK) Command Line Interface (AWS CDK CLI) is used with a credential plugin which returns an expiration property with the retrieved AWS credentials, the credentials are printed to the console output. To mitigate this iss…

1.8Düşük

CVE-2025-23206 1 yıl önce

IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk

aws aws-cdk

The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Users who use IAM OIDC custom resource provider package will download CA Thumbprints a…