Description
The AWS Amplify Studio amplify-codegen-ui is a package that generates front-end code from UI Builder entities (components, forms, views, and themes) primarily used in AWS Amplify Studio for component previews and in AWS Command Line Interface (AWS CLI) for generating component files in customers’ local applications.
Recommendation
Update the @aws-amplify/codegen-ui-react package to the latest compatible version. Followings are version details:
- Affected version(s): <= 2.20.2
- Patched version(s): 2.20.3
References
Could your website be exposed too?
SmartScanner can check your website for AWS Amplify Studio UI Component Properties Has an Input Validation Issue and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Vuetify has a Cross-site Scripting (XSS) vulnerability in the VDatePicker component - CVE-2025-8082
- matrix-js-sdk has insufficient validation when considering a room to be upgraded by another - CVE-2025-59160
- validator.js has a URL validation bypass vulnerability in its isURL function - CVE-2025-56200
- Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions - lodash-es - CVE-2025-13465
You might also like:
See something that needs correcting? Let us knowUpdated July 30, 2026