npm/aws-cdk-lib: low 3.8
AWS CDK CodePipeline: trusted entities are too broad
Action: Upgrade aws-cdk-lib to 2.189.0 or later.
npm i aws-cdk-lib@2.189.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.189.0 | - |
Fixed versions
| 2.189.0 |
Sources
- osv: GHSA-5pq3-h73f-66hr
- https://github.com/aws/aws-cdk/security/advisories/GHSA-5pq3-h73f-66hr
- https://github.com/aws/aws-cdk/issues/33709
- https://github.com/aws/aws-cdk/commit/a64b01cc2969822bb92d7bd72152ecb2ccf1c1cf
- https://github.com/aws/aws-cdk
- https://github.com/aws/aws-cdk/releases/tag/v2.184.0
published · modified · JSON