一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月9日

CVE-2026-107608 [MEDIUM] – Improper link resolution before file access in the asset bundling output handling in AWS a

未分类
📑 文章目录

Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to cause files from the build host to be published as the deployed asset.

To remediate this issue, users should upgrade to version 2.267.0 or later.