Vulnerabilities
Summary — last 7 days
New vulnerabilities5,494▲ 2,253 vs. last week
Critical / high2,824▲ 1,272 vs. last week
New active exploitation (KEV)9▲ 4 vs. last week
Unscored (no CVSS)610▲ 401 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | High (7.1) | 0.30% | — | Aws-amplify Graphql-index-transformerAIAws-amplify Data-constructAIAws-amplify Graphql-api-constructAI | 10/9/2026 | 10/16/2026 | Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via crafted queries. This issue has been addressed in… |