https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:17:36 +0000 https://vulnerability.circl.lu/vuln/cve-2026-18245 <p><strong>Affected:</strong> AWS Amplify Codegen UI</p> <p>Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote authenticated user to execute arbitrary code in end-user browsers, developer machines, CI/CD environments, and server-side rendering contexts via crafted Studio component or theme schema values due to insufficient coverage and effectiveness of the input validation introduced for CVE-2025-4318.</p> <p>To remediate this issue, users should upgrade to version 2.20.6</p> <p><strong>Affected:</strong> AWS Amplify Codegen UI</p> <p>Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote authenticated user to execute arbitrary code in end-user browsers, developer machines, CI/CD environments, and server-side rendering contexts via crafted Studio component or theme schema values due to insufficient coverage and effectiveness of the input validation introduced for CVE-2025-4318.</p> <p>To remediate this issue, users should upgrade to version 2.20.6</p> https://vulnerability.circl.lu/vuln/cve-2026-18245