Important
We highly recommend that you keep your environments up to date by upgrading to the latest version. See Update the solution for the required actions to upgrade.
The Landing Zone Accelerator on AWS is designed and tested to work with the latest versions of Service Control Policies (SCPs) from the LZA Universal Configuration and the LZA CCCS Medium Configuration. Please review the latest changes in these repositories to ensure your SCPs align with the latest changes.
Fixed
- fix(asea): Resolved route table propagation lookup failure for ASEA transit gateway cross-account resources
- fix(deps): Remediated CVE-2026-44705 in
tmppackage [Tier 2] - fix(deps): Remediated CVE-2025-62718 (NO_PROXY bypass) and CVE prototype pollution in
axiosvia resolution upgrade to 1.16.1
Changed
- chore(deps): Upgraded
vitestfrom 3.2.4 to 4.1.8 and@vitest/coverage-v8to 4.1.8, resolving critical CVE-2026-47429 (arbitrary file read/execute when Vitest UI server is listening)