CVE-2026-85012 - OS command injection in the Amazon CodeCatalyst blueprints SDK
Codecatalyst Blueprints ยท 2026-10-21
Actions
Technical Details
| Affected Versions | <= 0.3.155 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-85012 |
| Migration Required | Yes |
| Cost Impact | Neutral |
What This Means
For DevOps Teams
Update the @amazon-codecatalyst/blueprints.blueprint npm package to version 0.3.156 or later to address the OS command injection vulnerability (CVE-2026-85012).
For Platform Teams
Deploy the updated @amazon-codecatalyst/blueprints.blueprint package to ensure the security of project environments and prevent potential command injection attacks.
For Executives
Implement the security patch for Amazon CodeCatalyst blueprints to mitigate the risk of OS command injection attacks and protect project environments.