{"id":"GHSA-464c-974j-9xm6","summary":"AWS CDK CodeBuild S3 Log Encryption Boolean Inversion","details":"## Summary\n\nThe AWS Cloud Development Kit (AWS CDK) is an open-source software development framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation. We identified an issue in which explicitly setting `encrypted: true` on the `S3LoggingOptions` property of an AWS CodeBuild project construct produces the opposite of the intended behavior, disabling encryption on CodeBuild build logs stored in S3.\n\n## Impact\n\nThe `S3LoggingOptions.encrypted` property in the `aws-codebuild` module uses positive polarity (`true` = encryption ON), but is mapped directly to the CloudFormation `S3LogsConfig.EncryptionDisabled` field, which uses negative polarity (`true` = encryption OFF). Because the value is not negated before being passed to CloudFormation, any explicit assignment produces inverted behavior:\n\n* Setting `encrypted: true` (intending encryption ON) causes CloudFormation to receive `EncryptionDisabled: true`, disabling encryption.\n\n* Setting `encrypted: false` (intending encryption OFF) causes CloudFormation to receive `EncryptionDisabled: false`, enabling encryption.\n\nUsers who omit the property entirely are not affected, as `undefined` passes through to CloudFormation, which defaults to encryption enabled.\n\nUsers affected by this issue could have CodeBuild S3 build logs stored using SSE-S3 (Amazon S3-managed keys, AES-256) rather than the AWS managed keys that CodeBuild applies by default. Since January 5, 2023, Amazon S3 automatically encrypts all new object uploads with SSE-S3, so logs written after that date remain encrypted at rest. However, logs written prior to that date to buckets that did not have default encryption configured at the time are potentially not encrypted at rest.\n\nImpacted versions: \u003e= 1.75.0 and \u003c= 2.252.0\n\n## Patches\n\nThis issue has been addressed in `aws-cdk-lib` version 2.253.0. Upgrade to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.\n\n## Workarounds\n\nUsers who are unable to immediately upgrade to version 2.253.0 should omit the `encrypted` property from their `S3LoggingOptions` configuration entirely. When the property is omitted, the value is not passed to CloudFormation, and CodeBuild applies its default behavior of encrypting build logs using AWS managed keys.\n\n## References\n\nIf you have any questions or comments about this advisory, contact AWS Security via our issue reporting page \\[1\\] or directly via email to [aws-security@amazon.com](mailto:aws-security@amazon.com). Please do not create a public GitHub issue.\n\n\\[1\\] \u003chttps://aws.amazon.com/security/vulnerability-reporting/\u003e\n\n## Acknowledgement\n\nAWS thanks AISafe for collaborating on this issue through the coordinated disclosure process.","aliases":["GO-2026-6093"],"modified":"2026-08-18T17:26:21.868835886Z","published":"2026-07-24T16:44:20Z","database_specific":{"github_reviewed_at":"2026-07-24T16:44:20Z","nvd_published_at":null,"cwe_ids":["CWE-311","CWE-682"],"severity":"LOW","github_reviewed":true},"references":[{"type":"WEB","url":"https://github.com/aws/aws-cdk/security/advisories/GHSA-464c-974j-9xm6"},{"type":"WEB","url":"https://github.com/aws/aws-cdk/pull/37761"},{"type":"WEB","url":"https://github.com/aws/aws-cdk/commit/40319185dc645d2afc6acf1d25547a86250e97af"},{"type":"PACKAGE","url":"https://github.com/aws/aws-cdk"},{"type":"WEB","url":"https://github.com/aws/aws-cdk/releases/tag/v2.253.0"}],"affected":[{"package":{"name":"aws-cdk-lib","ecosystem":"npm","purl":"pkg:npm/aws-cdk-lib"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.253.0"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/07/GHSA-464c-974j-9xm6/GHSA-464c-974j-9xm6.json"}},{"package":{"name":"Amazon.CDK.Lib","ecosystem":"NuGet","purl":"pkg:nuget/Amazon.CDK.Lib"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.253.0"}]}],"versions":["2.0.0","2.1.0","2.10.0","2.100.0","2.101.0","2.101.1","2.102.0","2.102.1","2.103.0","2.103.1","2.104.0","2.105.0","2.106.0","2.106.1","2.107.0","2.108.0","2.108.1","2.109.0","2.11.0","2.110.0","2.110.1","2.111.0","2.112.0","2.113.0","2.114.0","2.114.1","2.115.0","2.116.0","2.116.1","2.117.0","2.118.0","2.119.0","2.12.0","2.120.0","2.121.0","2.121.1","2.122.0","2.123.0","2.124.0","2.125.0","2.126.0","2.127.0","2.128.0","2.129.0","2.13.0","2.130.0","2.131.0","2.132.0","2.132.1","2.133.0","2.134.0","2.135.0","2.136.0","2.136.1","2.137.0","2.138.0","2.139.0","2.139.1","2.14.0","2.140.0","2.141.0","2.142.0","2.142.1","2.143.0","2.143.1","2.144.0","2.145.0","2.146.0","2.147.0","2.147.1","2.147.2","2.147.3","2.148.0","2.148.1","2.149.0","2.15.0","2.150.0","2.151.0","2.151.1","2.152.0","2.153.0","2.154.0","2.154.1","2.155.0","2.156.0","2.157.0","2.158.0","2.159.0","2.159.1","2.16.0","2.160.0","2.161.0","2.161.1","2.162.0","2.162.1","2.163.0","2.163.1","2.164.0","2.164.1","2.165.0","2.166.0","2.167.0","2.167.1","2.167.2","2.168.0","2.169.0","2.17.0","2.170.0","2.171.0","2.171.1","2.172.0","2.173.0","2.173.1","2.173.2","2.173.3","2.173.4","2.174.0","2.174.1","2.175.0","2.175.1","2.176.0","2.177.0","2.178.0","2.178.1","2.178.2","2.179.0","2.18.0","2.180.0","2.181.0","2.181.1","2.182.0","2.183.0","2.184.0","2.184.1","2.185.0","2.186.0","2.187.0","2.188.0","2.189.0","2.189.1","2.19.0","2.190.0","2.191.0","2.192.0","2.193.0","2.194.0","2.195.0","2.196.0","2.196.1","2.197.0","2.198.0","2.199.0","2.2.0","2.20.0","2.200.0","2.200.1","2.200.2","2.201.0","2.202.0","2.203.0","2.203.1","2.204.0","2.205.0","2.206.0","2.207.0","2.208.0","2.209.0","2.209.1","2.21.0","2.21.1","2.210.0","2.211.0","2.212.0","2.213.0","2.214.0","2.214.1","2.215.0","2.216.0","2.217.0","2.218.0","2.219.0","2.22.0","2.220.0","2.221.0","2.221.1","2.222.0","2.223.0","2.224.0","2.225.0","2.226.0","2.227.0","2.228.0","2.229.0","2.229.1","2.23.0","2.230.0","2.231.0","2.232.0","2.232.1","2.232.2","2.233.0","2.234.0","2.234.1","2.235.0","2.235.1","2.236.0","2.237.0","2.237.1","2.238.0","2.239.0","2.24.0","2.24.1","2.240.0","2.241.0","2.242.0","2.243.0","2.244.0","2.245.0","2.246.0","2.247.0","2.248.0","2.249.0","2.25.0","2.250.0","2.251.0","2.252.0","2.26.0","2.27.0","2.28.0","2.28.1","2.29.0","2.29.1","2.3.0","2.30.0","2.31.0","2.31.1","2.31.2","2.32.0","2.32.1","2.33.0","2.34.0","2.34.1","2.34.2","2.35.0","2.36.0","2.37.0","2.37.1","2.38.0","2.38.1","2.39.0","2.39.1","2.4.0","2.40.0","2.41.0","2.42.0","2.42.1","2.43.0","2.43.1","2.44.0","2.45.0","2.46.0","2.47.0","2.48.0","2.49.0","2.49.1","2.5.0","2.50.0","2.51.0","2.51.1","2.52.0","2.52.1","2.53.0","2.54.0","2.55.0","2.55.1","2.56.0","2.56.1","2.57.0","2.58.0","2.58.1","2.59.0","2.6.0","2.60.0","2.61.0","2.61.1","2.62.0","2.62.1","2.62.2","2.63.0","2.63.1","2.63.2","2.64.0","2.65.0","2.66.0","2.66.1","2.67.0","2.68.0","2.69.0","2.7.0","2.70.0","2.71.0","2.72.0","2.72.1","2.73.0","2.74.0","2.75.0","2.75.1","2.76.0","2.77.0","2.78.0","2.79.0","2.79.1","2.8.0","2.80.0","2.81.0","2.82.0","2.83.0","2.83.1","2.84.0","2.85.0","2.86.0","2.87.0","2.88.0","2.89.0","2.9.0","2.90.0","2.91.0","2.92.0","2.93.0","2.94.0","2.95.0","2.95.1","2.96.0","2.96.1","2.96.2","2.97.0","2.97.1","2.98.0","2.99.0","2.99.1"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/07/GHSA-464c-974j-9xm6/GHSA-464c-974j-9xm6.json"}},{"package":{"name":"software.amazon.awscdk:aws-cdk-lib","ecosystem":"Maven","purl":"pkg:maven/software.amazon.awscdk/aws-cdk-lib"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.253.0"}]}],"versions":["2.0.0","2.0.0-alpha.10","2.0.0-alpha.11","2.0.0-alpha.12","2.0.0-alpha.13","2.0.0-alpha.14","2.0.0-rc.1","2.0.0-rc.10","2.0.0-rc.11","2.0.0-rc.12","2.0.0-rc.13","2.0.0-rc.14","2.0.0-rc.15","2.0.0-rc.16","2.0.0-rc.17","2.0.0-rc.18","2.0.0-rc.19","2.0.0-rc.20","2.0.0-rc.21","2.0.0-rc.22","2.0.0-rc.23","2.0.0-rc.24","2.0.0-rc.25","2.0.0-rc.26","2.0.0-rc.27","2.0.0-rc.28","2.0.0-rc.29","2.0.0-rc.3","2.0.0-rc.30","2.0.0-rc.31","2.0.0-rc.32","2.0.0-rc.33","2.0.0-rc.4","2.0.0-rc.5","2.0.0-rc.6","2.0.0-rc.7","2.0.0-rc.8","2.0.0-rc.9","2.1.0","2.10.0","2.100.0","2.101.0","2.101.1","2.102.0","2.102.1","2.103.0","2.103.1","2.104.0","2.105.0","2.106.0","2.106.1","2.107.0","2.108.0","2.108.1","2.109.0","2.11.0","2.110.0","2.110.1","2.111.0","2.112.0","2.113.0","2.114.0","2.114.1","2.115.0","2.116.0","2.116.1","2.117.0","2.118.0","2.119.0","2.12.0","2.120.0","2.121.0","2.121.1","2.122.0","2.123.0","2.124.0","2.125.0","2.126.0","2.127.0","2.128.0","2.129.0","2.13.0","2.130.0","2.131.0","2.132.0","2.132.1","2.133.0","2.134.0","2.135.0","2.136.0","2.136.1","2.137.0","2.138.0","2.139.0","2.139.1","2.14.0","2.140.0","2.141.0","2.142.0","2.142.1","2.143.0","2.143.1","2.144.0","2.145.0","2.146.0","2.147.0","2.147.1","2.147.2","2.147.3","2.148.0","2.148.1","2.149.0","2.15.0","2.150.0","2.151.0","2.151.1","2.152.0","2.153.0","2.154.0","2.154.1","2.155.0","2.156.0","2.157.0","2.158.0","2.159.0","2.159.1","2.16.0","2.160.0","2.161.0","2.161.1","2.162.0","2.162.1","2.163.0","2.163.1","2.164.0","2.164.1","2.165.0","2.166.0","2.167.0","2.167.1","2.167.2","2.168.0","2.169.0","2.17.0","2.170.0","2.171.0","2.171.1","2.172.0","2.173.0","2.173.1","2.173.2","2.173.3","2.173.4","2.174.0","2.174.1","2.175.0","2.175.1","2.176.0","2.177.0","2.178.0","2.178.1","2.178.2","2.179.0","2.18.0","2.180.0","2.181.0","2.181.1","2.182.0","2.183.0","2.184.0","2.184.1","2.185.0","2.186.0","2.187.0","2.188.0","2.189.0","2.189.1","2.19.0","2.190.0","2.191.0","2.192.0","2.193.0","2.194.0","2.195.0","2.196.0","2.196.1","2.197.0","2.198.0","2.199.0","2.2.0","2.20.0","2.200.1","2.200.2","2.201.0","2.202.0","2.203.0","2.203.1","2.204.0","2.205.0","2.206.0","2.207.0","2.208.0","2.209.0","2.209.1","2.21.0","2.21.1","2.210.0","2.211.0","2.212.0","2.213.0","2.214.0","2.214.1","2.215.0","2.216.0","2.217.0","2.218.0","2.219.0","2.22.0","2.220.0","2.221.0","2.221.1","2.222.0","2.223.0","2.224.0","2.225.0","2.226.0","2.227.0","2.228.0","2.229.0","2.229.1","2.23.0","2.230.0","2.231.0","2.232.0","2.232.1","2.232.2","2.233.0","2.234.0","2.234.1","2.235.0","2.235.1","2.236.0","2.237.0","2.237.1","2.238.0","2.239.0","2.24.0","2.24.1","2.240.0","2.241.0","2.242.0","2.243.0","2.244.0","2.245.0","2.246.0","2.247.0","2.248.0","2.249.0","2.25.0","2.250.0","2.251.0","2.252.0","2.26.0","2.27.0","2.28.0","2.28.1","2.29.0","2.29.1","2.3.0","2.30.0","2.31.0","2.31.1","2.31.2","2.32.0","2.32.1","2.33.0","2.34.0","2.34.1","2.34.2","2.35.0","2.36.0","2.37.0","2.37.1","2.38.0","2.38.1","2.39.0","2.39.1","2.4.0","2.40.0","2.41.0","2.42.0","2.42.1","2.43.0","2.43.1","2.44.0","2.45.0","2.46.0","2.47.0","2.48.0","2.49.0","2.49.1","2.5.0","2.50.0","2.51.0","2.51.1","2.52.0","2.52.1","2.53.0","2.54.0","2.55.0","2.55.1","2.56.0","2.56.1","2.57.0","2.58.0","2.58.1","2.59.0","2.6.0","2.60.0","2.61.0","2.61.1","2.62.0","2.62.1","2.62.2","2.63.0","2.63.1","2.63.2","2.64.0","2.65.0","2.66.0","2.66.1","2.67.0","2.68.0","2.69.0","2.7.0","2.70.0","2.71.0","2.72.0","2.72.1","2.73.0","2.74.0","2.75.0","2.75.1","2.76.0","2.77.0","2.78.0","2.79.0","2.79.1","2.8.0","2.80.0","2.81.0","2.82.0","2.83.0","2.83.1","2.84.0","2.85.0","2.86.0","2.87.0","2.88.0","2.89.0","2.9.0","2.90.0","2.91.0","2.92.0","2.93.0","2.94.0","2.95.0","2.95.1","2.96.0","2.96.1","2.96.2","2.97.0","2.97.1","2.98.0","2.99.0","2.99.1"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/07/GHSA-464c-974j-9xm6/GHSA-464c-974j-9xm6.json"}},{"package":{"name":"github.com/aws/aws-cdk-go/awscdk/v2","ecosystem":"Go","purl":"pkg:golang/github.com/aws/aws-cdk-go/awscdk/v2"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.253.0"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/07/GHSA-464c-974j-9xm6/GHSA-464c-974j-9xm6.json"}},{"package":{"name":"@aws-cdk/aws-codebuild","ecosystem":"npm","purl":"pkg:npm/%40aws-cdk/aws-codebuild"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.75.0"},{"last_affected":"1.204.0"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/07/GHSA-464c-974j-9xm6/GHSA-464c-974j-9xm6.json"}},{"package":{"name":"Amazon.CDK.AWS.CodeBuild","ecosystem":"NuGet","purl":"pkg:nuget/Amazon.CDK.AWS.CodeBuild"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.75.0"},{"last_affected":"1.204.0"}]}],"versions":["1.100.0","1.101.0","1.102.0","1.103.0","1.104.0","1.105.0","1.106.0","1.106.1","1.107.0","1.108.0","1.108.1","1.109.0","1.110.0","1.110.1","1.111.0","1.112.0","1.113.0","1.114.0","1.115.0","1.116.0","1.117.0","1.118.0","1.119.0","1.120.0","1.121.0","1.122.0","1.123.0","1.124.0","1.125.0","1.126.0","1.127.0","1.128.0","1.129.0","1.130.0","1.131.0","1.132.0","1.133.0","1.134.0","1.135.0","1.136.0","1.137.0","1.138.0","1.138.1","1.138.2","1.139.0","1.140.0","1.141.0","1.142.0","1.143.0","1.144.0","1.145.0","1.146.0","1.147.0","1.148.0","1.149.0","1.150.0","1.151.0","1.152.0","1.153.0","1.153.1","1.154.0","1.155.0","1.156.0","1.156.1","1.157.0","1.158.0","1.159.0","1.160.0","1.161.0","1.162.0","1.163.0","1.163.1","1.163.2","1.164.0","1.165.0","1.166.1","1.167.0","1.168.0","1.169.0","1.170.0","1.170.1","1.171.0","1.172.0","1.173.0","1.174.0","1.175.0","1.176.0","1.177.0","1.178.0","1.179.0","1.180.0","1.181.0","1.181.1","1.182.0","1.183.0","1.184.0","1.184.1","1.185.0","1.186.0","1.186.1","1.187.0","1.188.0","1.189.0","1.190.0","1.191.0","1.192.0","1.193.0","1.194.0","1.195.0","1.196.0","1.197.0","1.198.0","1.198.1","1.199.0","1.200.0","1.201.0","1.202.0","1.203.0","1.204.0","1.75.0","1.76.0","1.77.0","1.78.0","1.79.0","1.80.0","1.81.0","1.82.0","1.83.0","1.84.0","1.85.0","1.86.0","1.87.0","1.87.1","1.88.0","1.89.0","1.90.0","1.90.1","1.91.0","1.92.0","1.93.0","1.94.0","1.94.1","1.95.0","1.95.1","1.95.2","1.96.0","1.97.0","1.98.0","1.99.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/07/GHSA-464c-974j-9xm6/GHSA-464c-974j-9xm6.json"}},{"package":{"name":"software.amazon.awscdk:codebuild","ecosystem":"Maven","purl":"pkg:maven/software.amazon.awscdk/codebuild"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.75.0"},{"last_affected":"1.204.0"}]}],"versions":["1.100.0","1.101.0","1.102.0","1.103.0","1.104.0","1.105.0","1.106.0","1.106.1","1.107.0","1.108.0","1.108.1","1.109.0","1.110.0","1.110.1","1.111.0","1.112.0","1.113.0","1.114.0","1.115.0","1.116.0","1.117.0","1.118.0","1.119.0","1.120.0","1.121.0","1.122.0","1.123.0","1.124.0","1.125.0","1.126.0","1.127.0","1.128.0","1.129.0","1.130.0","1.131.0","1.132.0","1.133.0","1.134.0","1.135.0","1.136.0","1.137.0","1.138.0","1.138.1","1.138.2","1.139.0","1.140.0","1.141.0","1.142.0","1.143.0","1.144.0","1.145.0","1.146.0","1.147.0","1.148.0","1.149.0","1.150.0","1.151.0","1.152.0","1.153.0","1.153.1","1.154.0","1.155.0","1.156.0","1.156.1","1.157.0","1.158.0","1.159.0","1.160.0","1.161.0","1.162.0","1.163.0","1.163.1","1.163.2","1.164.0","1.165.0","1.166.1","1.167.0","1.168.0","1.169.0","1.170.0","1.170.1","1.171.0","1.172.0","1.173.0","1.174.0","1.175.0","1.176.0","1.177.0","1.178.0","1.179.0","1.180.0","1.181.0","1.181.1","1.182.0","1.183.0","1.184.0","1.184.1","1.185.0","1.186.0","1.186.1","1.187.0","1.188.0","1.189.0","1.190.0","1.191.0","1.192.0","1.193.0","1.194.0","1.195.0","1.196.0","1.197.0","1.198.0","1.198.1","1.199.0","1.200.0","1.201.0","1.202.0","1.203.0","1.204.0","1.75.0","1.76.0","1.77.0","1.78.0","1.79.0","1.80.0","1.81.0","1.82.0","1.83.0","1.84.0","1.85.0","1.86.0","1.87.0","1.87.1","1.88.0","1.89.0","1.90.0","1.90.1","1.91.0","1.92.0","1.93.0","1.94.0","1.94.1","1.95.0","1.95.1","1.95.2","1.96.0","1.97.0","1.98.0","1.99.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/07/GHSA-464c-974j-9xm6/GHSA-464c-974j-9xm6.json"}},{"package":{"name":"github.com/aws/aws-cdk-go/awscdk","ecosystem":"Go","purl":"pkg:golang/github.com/aws/aws-cdk-go/awscdk"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.175.0-devpreview"},{"last_affected":"1.204.0-devpreview"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/07/GHSA-464c-974j-9xm6/GHSA-464c-974j-9xm6.json"}},{"package":{"name":"aws-cdk-lib","ecosystem":"PyPI","purl":"pkg:pypi/aws-cdk-lib"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.253.0"}]}],"versions":["2.0.0","2.0.0a1","2.0.0a11","2.0.0a12","2.0.0a13","2.0.0a4","2.0.0a6","2.0.0rc1","2.0.0rc10","2.0.0rc11","2.0.0rc12","2.0.0rc13","2.0.0rc14","2.0.0rc15","2.0.0rc16","2.0.0rc17","2.0.0rc18","2.0.0rc19","2.0.0rc20","2.0.0rc21","2.0.0rc22","2.0.0rc23","2.0.0rc24","2.0.0rc25","2.0.0rc26","2.0.0rc27","2.0.0rc28","2.0.0rc29","2.0.0rc3","2.0.0rc30","2.0.0rc31","2.0.0rc32","2.0.0rc33","2.0.0rc4","2.0.0rc5","2.0.0rc6","2.0.0rc7","2.0.0rc8","2.0.0rc9","2.1.0","2.10.0","2.100.0","2.101.0","2.101.1","2.102.0","2.102.1","2.103.0","2.103.1","2.104.0","2.105.0","2.106.0","2.106.1","2.107.0","2.108.0","2.108.1","2.109.0","2.11.0","2.110.0","2.110.1","2.111.0","2.112.0","2.113.0","2.114.0","2.114.1","2.115.0","2.116.0","2.116.1","2.117.0","2.118.0","2.119.0","2.12.0","2.120.0","2.121.0","2.121.1","2.122.0","2.123.0","2.124.0","2.125.0","2.126.0","2.127.0","2.128.0","2.129.0","2.13.0","2.130.0","2.131.0","2.132.0","2.132.1","2.133.0","2.134.0","2.135.0","2.136.0","2.136.1","2.137.0","2.138.0","2.139.0","2.139.1","2.14.0","2.140.0","2.141.0","2.142.0","2.142.1","2.143.0","2.143.1","2.144.0","2.145.0","2.146.0","2.147.0","2.147.1","2.147.2","2.147.3","2.148.0","2.148.1","2.149.0","2.15.0","2.150.0","2.151.0","2.151.1","2.152.0","2.153.0","2.154.0","2.154.1","2.155.0","2.156.0","2.157.0","2.158.0","2.159.0","2.159.1","2.16.0","2.160.0","2.161.0","2.161.1","2.162.0","2.162.1","2.163.0","2.163.1","2.164.0","2.164.1","2.165.0","2.166.0","2.167.0","2.167.1","2.167.2","2.168.0","2.169.0","2.17.0","2.170.0","2.171.0","2.171.1","2.172.0","2.173.0","2.173.1","2.173.2","2.173.3","2.173.4","2.174.0","2.174.1","2.175.0","2.175.1","2.176.0","2.177.0","2.178.0","2.178.1","2.178.2","2.179.0","2.18.0","2.180.0","2.181.0","2.181.1","2.182.0","2.183.0","2.184.0","2.184.1","2.185.0","2.186.0","2.187.0","2.188.0","2.189.0","2.189.1","2.19.0","2.190.0","2.191.0","2.192.0","2.193.0","2.194.0","2.195.0","2.196.0","2.196.1","2.197.0","2.198.0","2.199.0","2.2.0","2.20.0","2.200.0","2.200.1","2.200.2","2.201.0","2.202.0","2.203.0","2.203.1","2.204.0","2.205.0","2.206.0","2.207.0","2.208.0","2.209.0","2.209.1","2.21.0","2.21.1","2.210.0","2.211.0","2.212.0","2.213.0","2.214.0","2.214.1","2.215.0","2.216.0","2.217.0","2.218.0","2.219.0","2.22.0","2.220.0","2.221.0","2.221.1","2.222.0","2.223.0","2.224.0","2.225.0","2.226.0","2.227.0","2.228.0","2.229.0","2.229.1","2.23.0","2.230.0","2.231.0","2.232.0","2.232.1","2.232.2","2.233.0","2.234.0","2.234.1","2.235.0","2.235.1","2.236.0","2.237.0","2.237.1","2.238.0","2.239.0","2.24.0","2.24.1","2.240.0","2.241.0","2.242.0","2.243.0","2.244.0","2.245.0","2.246.0","2.247.0","2.248.0","2.249.0","2.25.0","2.250.0","2.251.0","2.252.0","2.26.0","2.27.0","2.28.0","2.28.1","2.29.0","2.29.1","2.3.0","2.30.0","2.31.0","2.31.1","2.31.2","2.32.0","2.32.1","2.33.0","2.34.0","2.34.1","2.34.2","2.35.0","2.36.0","2.37.0","2.37.1","2.38.0","2.38.1","2.39.0","2.39.1","2.4.0","2.40.0","2.41.0","2.42.0","2.42.1","2.43.0","2.43.1","2.44.0","2.45.0","2.46.0","2.47.0","2.48.0","2.49.0","2.49.1","2.5.0","2.50.0","2.51.0","2.51.1","2.52.0","2.52.1","2.53.0","2.54.0","2.55.0","2.55.1","2.56.0","2.56.1","2.57.0","2.58.0","2.58.1","2.59.0","2.6.0","2.60.0","2.61.0","2.61.1","2.62.0","2.62.1","2.62.2","2.63.0","2.63.1","2.63.2","2.64.0","2.65.0","2.66.0","2.66.1","2.67.0","2.68.0","2.69.0","2.7.0","2.70.0","2.71.0","2.72.0","2.72.1","2.73.0","2.74.0","2.75.0","2.75.1","2.76.0","2.77.0","2.78.0","2.79.0","2.79.1","2.8.0","2.80.0","2.81.0","2.82.0","2.83.0","2.83.1","2.84.0","2.85.0","2.86.0","2.87.0","2.88.0","2.89.0","2.9.0","2.90.0","2.91.0","2.92.0","2.93.0","2.94.0","2.95.0","2.95.1","2.96.0","2.96.1","2.96.2","2.97.0","2.97.1","2.98.0","2.99.0","2.99.1"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/07/GHSA-464c-974j-9xm6/GHSA-464c-974j-9xm6.json"}},{"package":{"name":"aws-cdk-aws-codebuild","ecosystem":"PyPI","purl":"pkg:pypi/aws-cdk-aws-codebuild"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.75.0"},{"last_affected":"1.204.0"}]}],"versions":["1.100.0","1.101.0","1.102.0","1.103.0","1.104.0","1.105.0","1.106.0","1.106.1","1.107.0","1.108.0","1.108.1","1.109.0","1.110.0","1.110.1","1.111.0","1.112.0","1.113.0","1.114.0","1.115.0","1.116.0","1.117.0","1.118.0","1.119.0","1.120.0","1.121.0","1.122.0","1.123.0","1.124.0","1.125.0","1.126.0","1.127.0","1.128.0","1.129.0","1.130.0","1.131.0","1.132.0","1.133.0","1.134.0","1.135.0","1.136.0","1.137.0","1.138.0","1.138.1","1.138.2","1.139.0","1.140.0","1.141.0","1.142.0","1.143.0","1.144.0","1.145.0","1.146.0","1.147.0","1.148.0","1.149.0","1.150.0","1.151.0","1.152.0","1.153.0","1.153.1","1.154.0","1.155.0","1.156.0","1.156.1","1.157.0","1.158.0","1.159.0","1.160.0","1.161.0","1.162.0","1.163.0","1.163.1","1.163.2","1.164.0","1.165.0","1.166.1","1.167.0","1.168.0","1.169.0","1.170.0","1.170.1","1.171.0","1.172.0","1.173.0","1.174.0","1.175.0","1.176.0","1.177.0","1.178.0","1.179.0","1.180.0","1.181.0","1.181.1","1.182.0","1.183.0","1.184.0","1.184.1","1.185.0","1.186.0","1.186.1","1.187.0","1.188.0","1.189.0","1.190.0","1.191.0","1.192.0","1.193.0","1.194.0","1.195.0","1.196.0","1.197.0","1.198.0","1.198.1","1.199.0","1.200.0","1.201.0","1.202.0","1.203.0","1.204.0","1.75.0","1.76.0","1.77.0","1.78.0","1.79.0","1.80.0","1.81.0","1.82.0","1.83.0","1.84.0","1.85.0","1.86.0","1.87.0","1.87.1","1.88.0","1.89.0","1.90.0","1.90.1","1.91.0","1.92.0","1.93.0","1.94.0","1.94.1","1.95.0","1.95.1","1.95.2","1.96.0","1.97.0","1.98.0","1.99.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/07/GHSA-464c-974j-9xm6/GHSA-464c-974j-9xm6.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"}]}