AWS AWS CDK

• CVE-2026-13760 High 7.3 OS Command Injection in aws-cdk-lib Docker Bundling 1.2%
• CVE-2025-23206 Low 1.8 IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk 0.3%
• CVE-2024-45037 Medium 6.4 AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template 0.3%
• CVE-2023-35165 Medium 6.6 AWS CDK EKS overly permissive trust policies 0.9%