VDB
GHSA-464c-974j-9xm6
GHSA-464c-974j-9xm6
PUBLISHED
CVSS 3.299999952316284 LOW
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion
Risk Scores
CVSS 3.1
3.299999952316284
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| PyPI | aws-cdk.aws-codebuild | 1.75.0, 1.75.0, 1.75.0 |
| Maven | software.amazon.awscdk:codebuild | 1.75.0, 1.75.0, 1.75.0 |
| Maven | software.amazon.awscdk:aws-cdk-lib | 0, 0, 0 |
| NuGet | Amazon.CDK.Lib | 0, 0, 0 |
| PyPI | aws-cdk-lib | 0, 0, 0 |
| npm | aws-cdk-lib | 0, 0, 0 |
| github.com | aws/aws-cdk-go/awscdk/v2 | 0, 0, 0 |
| github.com | aws/aws-cdk-go/awscdk | 1.175.0-devpreview, 1.175.0-devpreview, 1.175.0-devpreview |
| NuGet | Amazon.CDK.AWS.CodeBuild | 1.75.0, 1.75.0, 1.75.0 |
| aws-cdk | aws-codebuild | 1.75.0, 1.75.0, 1.75.0 |
| NuGet | Amazon.CDK.Lib | 0 |
| NuGet | Amazon.CDK.AWS.CodeBuild | 1.75.0 |
Timeline
- Jul 24, 2026 CVE Published
References
- https://github.com/advisories/GHSA-464c-974j-9xm6 advisory
- https://github.com/aws/aws-cdk/security/advisories/GHSA-464c-974j-9xm6 url
- https://github.com/aws/aws-cdk/pull/37761 patch
- https://github.com/aws/aws-cdk/commit/40319185dc645d2afc6acf1d25547a86250e97af patch
- https://github.com/aws/aws-cdk/releases/tag/v2.253.0 url
- https://github.com/aws/aws-cdk package