CVE-2025-4318
1 advisory.
npm/@aws-amplify/codegen-ui-react CVE-2025-4318: critical, EPSS 0.98%
AWS Amplify Studio UI Component Properties Has an Input Validation Issue
Action: Upgrade @aws-amplify/codegen-ui-react to 2.20.3 or later.
npm i @aws-amplify/codegen-ui-react@2.20.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.20.3 | - |
Fixed versions
| 2.20.3 |
Sources
- osv: GHSA-hf3j-86p7-mfw8
- https://github.com/aws-amplify/amplify-codegen-ui/security/advisories/GHSA-hf3j-86p7-mfw8
- https://nvd.nist.gov/vuln/detail/CVE-2025-4318
- https://github.com/aws-amplify/amplify-codegen-ui/commit/ca98c38b7c3d69ae7c94d2f62b51e32e8165dae6
- https://aws.amazon.com/security/security-bulletins/AWS-2025-010
- https://blog.securelayer7.net/cve-2025-4318-aws-amplify-rce
- https://github.com/aws-amplify/amplify-codegen-ui
- https://github.com/aws-amplify/amplify-codegen-ui/releases/tag/v2.20.3
CVE-2025-4318 · published · modified · JSON