Incorrect Calculation Affecting aws-cdk-lib package, versions [,2.253.0)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsSnyk Learn
Learn about Incorrect Calculation vulnerabilities in an interactive lesson.
Start learning- Snyk IDSNYK-PYTHON-AWSCDKLIB-18318519
- published26 Jul 2026
- disclosed24 Jul 2026
- creditAISafe
Introduced: 24 Jul 2026
New CVE NOT AVAILABLE CWE-311 (opens in a new tab)How to fix?
Upgrade aws-cdk-lib to version 2.253.0 or higher.
Overview
aws-cdk-lib is a Version 2 of the AWS Cloud Development Kit library
Affected versions of this package are vulnerable to Incorrect Calculation due to the incorrect mapping of the S3LoggingOptions.encrypted property to the CloudFormation S3LogsConfig.EncryptionDisabled field. An attacker can cause build logs to be stored unencrypted by explicitly setting the encrypted property to true, which unintentionally disables encryption.
Workaround
This vulnerability can be mitigated by omitting the encrypted property from the S3LoggingOptions configuration, allowing the default encryption behavior to apply.