Skip to content
This repository has been archived by the owner on May 21, 2024. It is now read-only.

[Snyk] Upgrade aws-cdk-lib from 2.16.0 to 2.122.0 #4

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Upgrade aws-cdk-lib from 2.16.0 to 2.122.0 #4

wants to merge 1 commit into from

Conversation

stackspotadmin
Copy link
Contributor

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade aws-cdk-lib from 2.16.0 to 2.122.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 150 versions ahead of your current version.
  • The recommended version was released 24 days ago, on 2024-01-18.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Incorrect Privilege Assignment
SNYK-JS-AWSCDKLIB-5721464		 247/1000
Why? Confidentiality impact: High, Integrity impact: High, Availability impact: High, Scope: Unchanged, Exploit Maturity: No data, User Interaction (UI): None, Privileges Required (PR): Low, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.00049, Social Trends: No, Days since published: 235, Reachable: No, Transitive dependency: No, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 98, Impact: 9.79, Likelihood: 2.52, Score Version: V5		 No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: aws-cdk-lib from aws-cdk-lib GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

aws_route53: Allow more fields from lower level construct (CfnRecordSet) into higher level Record constructs (aws-elasticloadbalancingv2): (network-load-balancer-supports-security-groups) ACM: Add ability when requesting a PrivateCertificate to choose Key Algorithm (codepipeline-actions): custom event for codepipeline codecommit actions Enabling IPv6 on Resources and VPCs
(cli): Provide a way to ignore "This app contains no stacks" pipeline: should allow crossRegionReplicationBuckets passthrough to underlying CodePipeline construct aws_ec2: passing keyPair to Instance does nothing cloudwatch-action: support alarm action lambda aws-signer: Signer Profile construct should support Notation-OCI-SHA384-ECDSA platform
2 participants
@stackspotadmin @snyk-bot