Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react
AWS Amplify ยท 2026-10-19
Actions
Technical Details
| Affected Versions | <2.20.6 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-18245 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update all instances of @aws-amplify/codegen-ui-react to version 2.20.6 to address the code injection vulnerability identified as CVE-2026-18245.
For Platform Teams
Deploy the latest version of @aws-amplify/codegen-ui-react (2.20.6) across all relevant environments to ensure security compliance and protect against code injection threats.
For Executives
Implement the upgrade to @aws-amplify/codegen-ui-react version 2.20.6 to mitigate the security risk posed by CVE-2026-18245 and protect against potential code injection attacks.