npm/aws-cdk-lib: medium 6.5
aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient Construct
Action: Upgrade aws-cdk-lib to 2.187.0 or later.
npm i aws-cdk-lib@2.187.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.37.0 | 2.187.0 | - |
Fixed versions
| 2.187.0 |
Sources
- osv: GHSA-qq4x-c6h6-rfxh
- https://github.com/aws/aws-cdk/security/advisories/GHSA-qq4x-c6h6-rfxh
- https://github.com/aws/aws-cdk/commit/d02e64aac18a72195ddcdb973defea7f32382c33
- https://github.com/aws/aws-cdk
published · modified · JSON