aws-cdk-lib is pinned to 2.5.6 which means we cannot update it in our codebases to remove a vulnerability

[WillGibson]

This is the CVE: https://www.cve.org/CVERecord?id=CVE-2023-35165

It's pinned here: https://github.com/aws/copilot-cli/blob/mainline/internal/pkg/template/overrides.go#L14

Maybe it's as simple as bumping the version in that line to the latest 2.x version?

[huanjani]

🎉 The update is now released in v1.33.3: https://github.com/aws/copilot-cli/releases/tag/v1.33.3