early signals AWS security bulletins infra

CVE-2026-89065 and CVE-2026-89066: Issue with projen - Path traversal and OS command injection

// AI summary

projen has flaws CVE-2026-89065 and CVE-2026-89066, which are a path traversal and OS command injection vulnerability.

// from the source

Read this article
Read at aws.amazon.com ↗ More from AWS security bulletins

# more from AWS security bulletins

  1. AWS security bulletins infra

    CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

    aws.amazon.com
  2. AWS security bulletins infra

    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

    aws.amazon.com
  3. AWS security bulletins infra

    CVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents Tools

    aws.amazon.com
  4. AWS security bulletins infra

    CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

    aws.amazon.com
  5. AWS security bulletins infra

    CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass

    aws.amazon.com