code injection

Everything Sandbox Desk has reported about code injection: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Dev Teams Must Upgrade AWS Amplify Codegen UI to Patch Authenticated Code Injection Flaw

Developers using the @aws-amplify/codegen-ui-react library must upgrade to version 2.20.6 to fix a code injection flaw allowing authenticated users to run arbitrary JavaScript.

Oct 18, 2026

Vulnerabilities

Unpatched Visual Studio Instances Face High-Severity Remote Code Execution Risk

A code injection flaw in Visual Studio Tools for Applications allows network-based execution, impacting versions prior to specific patch levels.

Oct 15, 2026