Approved changes feed: RSS · Atom

cpe:2.3:a:amazon:amplify_studio:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAmazon (0ed129a9-8e26-53dc-aefe-55957e638c30)
ProductAmplify Studio (4f745bb0-93bb-5b30-9f4f-fbda2d548fb8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4318 vulnerable 2026-06-08 07:29:16.029985 Input validation issue in AWS Amplify Studio UI component properties
The AWS Amplify Studio UI component property expressions in the aws-amplify/amplify-codegen-ui package lack input validation. This could potentially allow an authenticated user who has access to create or modify components to run arbitrary JavaScript code during the component rendering and build process.
Published: 2025-05-05T18:16:34.075Z
Updated: 2026-07-29T15:18:10.368Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.