{"id":"CGA-vx4g-2526-wmx2","modified":"2026-08-07T15:32:31.382359334Z","published":"2026-07-25T12:13:49Z","upstream":["GHSA-464c-974j-9xm6"],"references":[{"type":"WEB","url":"https://github.com/aws/aws-cdk/security/advisories/GHSA-464c-974j-9xm6"},{"type":"WEB","url":"https://github.com/aws/aws-cdk/pull/37761"},{"type":"WEB","url":"https://github.com/aws/aws-cdk/commit/40319185dc645d2afc6acf1d25547a86250e97af"},{"type":"PACKAGE","url":"https://github.com/aws/aws-cdk"},{"type":"WEB","url":"https://github.com/aws/aws-cdk/releases/tag/v2.253.0"}],"affected":[{"package":{"name":"localstack","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/localstack?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.0-r20"}]}],"ecosystem_specific":{"components":[{"architecture":"x86_64","component_name":"aws-cdk-lib","component_version":"2.240.0","component_type":"python","component_location":"/usr/share/localstack/.venv/lib/python3.13/site-packages/aws_cdk_lib-2.240.0.dist-info/METADATA","component_purl":"pkg:pypi/aws-cdk-lib@2.240.0","latest_event_status":"fixed","latest_event_timestamp":"2026-08-07T09:16:09Z"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vx4g-2526-wmx2.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"}]}