{"vulnerability": "cve-2026-18245", "sightings": [{"uuid": "193cf258-936b-4d57-a931-58cac1c06b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18245", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrv4y6hato2z", "content": "CVE-2026-18245 - amplify codegen ui\nAn outdated version of Amazon @aws-amplify/codegen-ui-react allows attackers to inject malicious code into users' browsers, development machines, and servers. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aws #CVE #infosec", "creation_timestamp": "2026-07-30T19:04:04.176076Z"}, {"uuid": "d1722f3b-581e-4501-bb0f-827e4894a8c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18245", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bovzhqup4waot", "content": "CVE-2026-18245 - Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react\nCVE ID : CVE-2026-18245\n \n Published : July 30, 2026, 6:13 p.m. | 25\u00a0minutes ago\n \n Description : Improper control of code generation in Amazon @aws-amplify/codegen-ui-reac...", "creation_timestamp": "2026-07-30T19:04:13.204038Z"}, {"uuid": "19eee71e-6019-4865-92f8-1c3911bbaa0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18245", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrva7ih4u223", "content": "\ud83d\udd34 CVE-2026-18245 - Critical (9)\n\nImproper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18245/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T20:01:52.169609Z"}]}