CVE-2025-4318
Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react
Published Sep 22, 2026 · Amazon Web Services
No description has been ingested for this record.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Sep 22, 2026 · AWS Security Bulletins
Detected
Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react
Sources
- AWS Security BulletinsVendor advisoryCVE-2025-4318aws.amazon.com
- CVE.orgVulnerability recordCVE-2025-4318
Official CVE identifier
cve.org