Homepage

aws-cdk.aws-codebuild@1.196.0

The CDK Construct Library for AWS::CodeBuild

  • latest version

    1.204.0

  • latest non vulnerable version

    1.74.0

  • first published

    7 years ago

  • latest version published

    3 years ago

  • licenses detected

  • View aws-cdk.aws-codebuild package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the aws-cdk.aws-codebuild package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Incorrect Calculation

    aws-cdk.aws-codebuild is a The CDK Construct Library for AWS::CodeBuild

    Affected versions of this package are vulnerable to Incorrect Calculation due to the incorrect mapping of the S3LoggingOptions.encrypted property to the CloudFormation S3LogsConfig.EncryptionDisabled field. An attacker can cause build logs to be stored unencrypted by explicitly setting the encrypted property to true, which unintentionally disables encryption.

    How to fix Incorrect Calculation?

    There is no fixed version for aws-cdk.aws-codebuild.

    [1.75.0,)
    Go back to all versions of this package