CVE-2026-107608

Vendor

Amazon Web Services, Node.js

Product

AWS services, Node.js

CVSS

5.5

Exposure class

Cloud platform, Developer platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   AWS bulletin AWS 23d ago

   CVE-2026-107608: Improper link resolution in asset bundling output handling in aws-cdk-lib

   Bulletin ID: 2026-131-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/08/2026 12:30 PM PDT Description: AWS CDK is an open source framework that allows customers to build cloud infrastructure…

   CVE-2026-107608 Amazon Web Services Node.js
2. 8
   CVE NVD 23d ago

   Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent…

   Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to cause files from the build host to be published as the deployed asset.…

   CVSS 5.5 Fix available CVE-2026-107608