ag-ui-strands (0.1.0a3), amazon-nova-act-mcp (>=1.0.60.0, <=1.20260527102944.0) +7 more potentially affected by unknown CVE via strands-agents (>=1.14.0, <=1.35.0)

strands-agents PYPI version =1.14.0, =1.0.60.0, =1.0.9, =1.4.0, =2.3.18.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory: GHSA-3W55-933P-8PV5...

ag-ui-strands (0.1.0a3), amazon-nova-act-mcp (>=1.0.60.0, <=1.20260527102944.0) +7 more potentially affected by unknown CVE via strands-agents (>=1.14.0, <=1.35.0)

strands-agents PYPI version =1.14.0, =1.0.60.0, =1.0.9, =1.4.0, =2.3.18.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-3W55-933P-8PV5...

ag-ui-strands (0.1.0a3), amazon-nova-act-mcp (>=1.0.60.0, <=1.20260527102944.0) +7 more potentially affected by CVE-2026-115419 via strands-agents (>=1.14.0, <=1.35.0)

strands-agents PYPI version =1.14.0, =1.0.60.0, =1.0.9, =1.4.0, =2.3.18.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-115419 Source advisory: OSV:GHSA-4V6F-7VJH-6X4M...

ag-ui-strands (0.1.0a3), amazon-nova-act-mcp (>=1.0.60.0, <=1.20260527102944.0) +7 more potentially affected by CVE-2026-115419 via strands-agents (>=1.14.0, <=1.35.0)

strands-agents PYPI version =1.14.0, =1.0.60.0, =1.0.9, =1.4.0, =2.3.18.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-115419 Source advisory: SNYK:PYTHON-STRANDSAGENTS-21460719...

CVE-2026-85654

Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor to execute arbitrary code on the host that deploys the generated application via crafted table, index, or attribute...

EUVD-2026-71635

Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor to execute arbitrary code on the host that deploys the generated application via crafted table, index, or attribute...

CVE-2026-85654 Code injection in the CDK generator in Amazon awslabs.dynamodb-mcp-server

Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor to execute arbitrary code on the host that deploys the generated application via crafted table, index, or attribute...

CVE-2026-85654

Amazon awslabs.dynamodb-mcp-server contains a code injection vulnerability in its CDK generator component. The root cause is improper neutralization of special elements used in a template engine , allowing a context-dependent actor to execute arbitrary code on the host that deploys the generated ...

awslabs-dynamodb-mcp-server (>=2.0.4, <=2.1.9) potentially affected by CVE-2026-16584 via awslabs-aws-api-mcp-server (>=1.0.2, <=1.3.24)

awslabs-aws-api-mcp-server PYPI version =1.0.2, =2.0.4, =2.1.9 Source cves: CVE-2026-16584 Source advisory: OSV:PYSEC-2026-3549...

awslabs-dynamodb-mcp-server (>=2.0.4, <=2.1.9) potentially affected by CVE-2026-16584 via awslabs-aws-api-mcp-server (>=1.0.2, <=1.3.24)

awslabs-aws-api-mcp-server PYPI version =1.0.2, =2.0.4, =2.1.9 Source cves: CVE-2026-16584 Source advisory: OSV:GHSA-29W2-FQ35-V728...

awslabs-dynamodb-mcp-server (>=2.0.4, <=2.0.19) potentially affected by CVE-2026-4270 via awslabs-aws-api-mcp-server (1.0.2)

awslabs-aws-api-mcp-server PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on awslabs-aws-api-mcp-server and may be impacted: - awslabs-dynamodb-mcp-server =2.0.4, =2.0.19 Source cves: CVE-2026-4270 Source advisory: GHSA-2CPP-J2FC-QHP7...

awslabs-dynamodb-mcp-server (>=2.0.4, <=2.0.19) potentially affected by CVE-2026-4270 via awslabs-aws-api-mcp-server (1.0.2)

awslabs-aws-api-mcp-server PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on awslabs-aws-api-mcp-server and may be impacted: - awslabs-dynamodb-mcp-server =2.0.4, =2.0.19 Source cves: CVE-2026-4270 Source advisory: OSV:GHSA-2CPP-J2FC-Q...

awslabs-dynamodb-mcp-server (>=2.0.4, <=2.0.19) potentially affected by CVE-2026-4270 via awslabs-aws-api-mcp-server (1.0.2)

awslabs-aws-api-mcp-server PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on awslabs-aws-api-mcp-server and may be impacted: - awslabs-dynamodb-mcp-server =2.0.4, =2.0.19 Source cves: CVE-2026-4270 Source advisory: OSV:PYSEC-2026-162...

awslabs-dynamodb-mcp-server (>=2.0.4, <=2.0.19) potentially affected by CVE-2026-4270 via awslabs-aws-api-mcp-server (1.0.2)

awslabs-aws-api-mcp-server PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on awslabs-aws-api-mcp-server and may be impacted: - awslabs-dynamodb-mcp-server =2.0.4, =2.0.19 Source cves: CVE-2026-4270 Source advisory: MEND:CVE-2026-4270...