CVE-2024-45037
1 advisory.
npm/aws-cdk CVE-2024-45037: medium 6.4
AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template
Action: Upgrade aws-cdk to 2.148.1 or later.
npm i aws-cdk@2.148.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.142.0 | 2.148.1 | - |
Fixed versions
| 2.148.1 |
Sources
- osv: GHSA-qj85-69xf-2vxq
- https://github.com/aws/aws-cdk/security/advisories/GHSA-qj85-69xf-2vxq
- https://nvd.nist.gov/vuln/detail/CVE-2024-45037
- https://github.com/aws/aws-cdk/commit/4bee768f07e73ab5fe466f9ad3d1845456a0513b
- https://docs.aws.amazon.com/cdk/v2/guide/home.html
- https://github.com/aws/aws-cdk
- https://github.com/aws/aws-cdk/releases/tag/v2.148.1
CVE-2024-45037 · published · modified · JSON