Search results

[MEDIUM] Axios Cross-Site Request Forgery Vulnerability

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#690 In cdk8s-team/cdk8s-examples;

· cdk8s-automation opened on Nov 29, 2025

[MEDIUM] js-yaml has prototype pollution in merge (<<)

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#681 In cdk8s-team/cdk8s-examples;

· cdk8s-automation opened on Nov 17, 2025

[HIGH] Axios is vulnerable to DoS attack through lack of data size check

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#629 In cdk8s-team/cdk8s-examples;

· cdk8s-automation opened on Sep 15, 2025

[LOW] tmp allows arbitrary temporary file / directory write via symbolic link <code>dir</code> parameter

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#610 In cdk8s-team/cdk8s-examples;

· cdk8s-automation opened on Aug 10, 2025

[MEDIUM] aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient Construct

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#560 In cdk8s-team/cdk8s-examples;

· cdk8s-automation opened on Apr 3, 2025

[LOW] AWS CDK CodePipeline: trusted entities are too broad

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#557 In cdk8s-team/cdk8s-examples;

· cdk8s-automation opened on Mar 27, 2025

[HIGH] axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#549 In cdk8s-team/cdk8s-examples;

· cdk8s-automation opened on Mar 10, 2025

[MEDIUM] @octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#543 In cdk8s-team/cdk8s-examples;

· cdk8s-automation opened on Feb 17, 2025

[MEDIUM] @octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#542 In cdk8s-team/cdk8s-examples;

· cdk8s-automation opened on Feb 17, 2025

[MEDIUM] @octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#541 In cdk8s-team/cdk8s-examples;

· cdk8s-automation opened on Feb 17, 2025

[LOW] AWS Cloud Development Kit (AWS CDK) IAM OIDC custom resource allows connection to unauthorized OIDC provider

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#524 In cdk8s-team/cdk8s-examples;

· cdk8s-automation opened on Jan 20, 2025

Example of how to use CDK8 across multiple environments

feature-requestNew/Enhanced functionality wantedNew/Enhanced functionality wanted

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

Status: Open.

#438 In cdk8s-team/cdk8s-examples;

· Almenon opened on Aug 7, 2024