p PatchFirst

PatchFirst · Latest vulnerabilities

@aws-amplify/codegen-ui-react vulnerabilities

Vulnerabilities published for @aws-amplify/codegen-ui-react in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2025-4318

    Critical · CVSS 9EPSS 0.98%Fix available

    Input validation issue in AWS Amplify Studio UI component properties

    The AWS Amplify Studio UI component property expressions in the aws-amplify/amplify-codegen-ui package lack input validation. This could potentially allow an authenticated user who has access to create or modify components to run arbitrary JavaScript code during the component rendering and build process.

    @aws-amplify/codegen-ui-reactNode.js
    • Update to 2.20.3
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →