Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-2598
5.5
MEDIUMCVSS v3
Published
March 21, 2025
Affected
1 project
Assigned by
ff89ba41-3aa1-4d27-914a-91399e9639e5
Severity scale
010
Description
When the AWS Cloud Development Kit (AWS CDK) Command Line Interface (AWS CDK CLI) is used with a credential plugin which returns an expiration property with the retrieved AWS credentials, the credentials are printed to the console output. To mitigate this issue, users should upgrade to version 2.178.2 or later and ensure any forked or derivative code is patched to incorporate the new fixes.
aws/aws-cdk
GitHubThe AWS Cloud Development Kit is a framework for defining cloud infrastructure in code
GitHubThe AWS Cloud Development Kit is a framework for defining cloud infrastructure in code>= 2.172.0, < 2.178.2NVD