Go to packages list

aws-amplify-codegen-ui-react

Ecosystem: npm

Downloads:

Vulnerabilities from the last (months)
  • 1CriticalAffects 1 version
  • 0HighAffects 0 versions
  • 0MediumAffects 0 versions
  • 0ModerateAffects 0 versions
  • 0LowAffects 0 versions
Severity distribution (all time)
1vulnerability
  • Critical1 (100.0%)
  • High0 (0.0%)
  • Medium0 (0.0%)
  • Moderate0 (0.0%)
  • Low0 (0.0%)

Monthly breakdown

  • 1 vulnerabilities
    • Critical: 1
    • High: 0
    • Medium: 0
    • Moderate: 0
    • Low: 0

Vulnerabilities (1)

Known vulnerabilities affecting aws-amplify-codegen-ui-react, based on data from OSV.

Vulnerabilities affecting aws-amplify-codegen-ui-react
IDSeveritySummaryAffected versionsPublishedSource
GHSA-hf3j-86p7-mfw8CriticalAWS Amplify Studio UI Component Properties Has an Input Validation Issue### Summary The AWS Amplify Studio [amplify-codegen-ui](https://github.com/aws-amplify/amplify-codegen-ui) is a package that generates front-end code from UI Builder entities (components, forms, views, and themes) primarily used in AWS Amplify Studio for component previews and in AWS Command Line Interface (AWS CLI) for generating component files in customers' local applications. An issue exists in the Amplify Studio property binding process of the `amplify-codegen-ui `package that could potentially allow an authenticated user to run arbitrary JavaScript code during the component rendering an
  • < 2.20.3
GitHub (opens in a new tab)
  • GHSA-hf3j-86p7-mfw8Critical
    AWS Amplify Studio UI Component Properties Has an Input Validation Issue
    • < 2.20.3
    GitHub (opens in a new tab)

    ### Summary The AWS Amplify Studio [amplify-codegen-ui](https://github.com/aws-amplify/amplify-codegen-ui) is a package that generates front-end code from UI Builder entities (components, forms, views, and themes) primarily used in AWS Amplify Studio for component previews and in AWS Command Line Interface (AWS CLI) for generating component files in customers' local applications. An issue exists in the Amplify Studio property binding process of the `amplify-codegen-ui `package that could potentially allow an authenticated user to run arbitrary JavaScript code during the component rendering an

    CVE: CVE-2025-4318

Showing 1-1 of 1 vulnerabilities