Advisories · Technology

aws-amplify/graphql-api-construct.

Every CVE that names aws-amplify/graphql-api-construct among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-108096 CVE record

CVSS 7.1 High

Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category
- aws-amplify/graphql-index-transformer
- aws-amplify/graphql-api-construct
- Broken access control
Not analysed yet 9 Oct 2026