AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AWSAWS-2026-108

Issue with projen - Path traversal and OS command injection

AWS

CVE-2026-89065 · Published Oct 25, 2026

High7.1
No fix yet
AWS advisory

Read this article

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Changes since it was listed

SeveritySep 27Severity: Unrated to High
Details and references
Severity from
NVD
Also known as
CVE-2026-89066

More AWS advisories

All AWS
Medium 5.9Oct 25Denial of service in the event stream header decoder in AWS SDK for Go v2CVE-2026-89090no fix yetMedium 5.9Oct 25XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePluginCVE-2026-18061no fix yetCritical 9.9Oct 25Server-side request forgery in the Session Manager port forwarding functionality in AWS...CVE-2026-89049no fix yetCritical 9.1Oct 25Integer overflow in tensor buffer validation in Deep Java LibraryCVE-2026-85228no fix yetMedium 6.8Oct 25eMudhra intermediate CA key recovery in AWS trust bundlesCVE-2026-111943no fix yetHigh 8.7Oct 25Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch DashboardsCVE-2026-84942no fix yet