- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 4 · 2 high, 1 medium, 1 low
- Weekly downloads
- 6.4M
- Dependents
- 688
- Registry
- npm
Advisories 4
- CVE-2026-13760High 7.3
OS Command Injection in aws-cdk-lib Docker Bundling
Affected: fixed in 2.260.0.
- CVE-2026-11417High 7.3
OS Command Injection in NodejsFunction Bundling in aws-cdk-lib
Affected: fixed in 2.246.0.
- CVE-2025-23206Low 1.8
IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk
Affected: fixed in 2.177.0.
- CVE-2023-35165Medium 6.6
AWS CDK EKS overly permissive trust policies
Affected: from 2.0.0, fixed in 2.80.0.