tag
Aws
High
Supply Chain Command Injection in AWS CDK's NodejsFunction — CVE-2026-11417
CVE-2026-11417·
aws-cdk-lib (npm package), NodejsFunction L2 construct
patched
High
Amazon WorkSpaces Skylight Workspace Config Service Local Privilege Escalation (CVE-2026-7791)
CVE-2026-7791·
Amazon WorkSpaces — Skylight Workspace Config Service
unpatched