Amplify

Everything Threat Times has reported about Amplify: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

AWS Fixes Code Injection Flaw in Amplify Codegen UI React Library

Threat TimesOct 17, 2026

Amazon Web Services released version 2.20.6 to address CVE-2026-18245, a code injection vulnerability in its Amplify Codegen UI React package that allows arbitrary JavaScript execution.

Vulnerabilities

AWS Amplify API Authorization Flaw Allows Cross-User Data Access

Threat TimesOct 9, 2026

A vulnerability in AWS Amplify API components lets authenticated users access records belonging to other users through crafted queries.