aws-solutions · tabdunabi · Dec 4, 2025 · Dec 4, 2025 · Dec 4, 2025
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.0.1] - 2025-12-03
+
+### Security
+
+- Upgraded node-forge to `1.3.3` to mitigate CVE-2025-12816, CVE-2025-66030 and CVE-2025-66031.
+- Upgraded werkzeug to `3.1.4` to mitigate CVE-2025-66221
+- Upgraded mdast-util-to-hast to `13.2.1` to mitigate CVE-2025-66400
+
 ## [4.0.0] - 2025-11-20
 
 ### Added

diff --git a/source/infrastructure/cdk.json b/source/infrastructure/cdk.json
@@ -64,7 +64,7 @@
     "@custom-bundler/unit-test": false,
     "solution_id": "SO0276",
     "solution_name": "generative-ai-application-builder-on-aws",
-    "solution_version": "v4.0.0",
+    "solution_version": "v4.0.1",
     "app_registry_name": "GAAB",
     "application_type": "AWS-Solutions",
     "application_trademark_name": "Generative AI Application Builder on AWS",

diff --git a/source/infrastructure/package-lock.json b/source/infrastructure/package-lock.json
diff --git a/source/infrastructure/package.json b/source/infrastructure/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@amzn/gen-ai-app-builder-on-aws-infrastructure",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "bin": {
     "infrastructure": "bin/gen-ai-app-builder.js"
   },

diff --git a/source/infrastructure/test/mock-lambda-func/node-lambda/package-lock.json b/source/infrastructure/test/mock-lambda-func/node-lambda/package-lock.json
diff --git a/source/infrastructure/test/mock-lambda-func/node-lambda/package.json b/source/infrastructure/test/mock-lambda-func/node-lambda/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@amzn/node-lambda",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "description": "A mock lambda implementation for CDK infrastructure unit",
   "main": "index.js",
   "scripts": {

diff --git a/source/infrastructure/test/mock-lambda-func/python-lambda/pyproject.toml b/source/infrastructure/test/mock-lambda-func/python-lambda/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "mock-lambda-function"
-version = "4.0.0"
+version = "4.0.1"
 authors = [ "Amazon Web Services" ]
 description = "Mock lambda implementation to unit test infrastructure code"
 packages = [

diff --git a/source/infrastructure/test/mock-lambda-func/typescript-lambda/package-lock.json b/source/infrastructure/test/mock-lambda-func/typescript-lambda/package-lock.json
diff --git a/source/infrastructure/test/mock-lambda-func/typescript-lambda/package.json b/source/infrastructure/test/mock-lambda-func/typescript-lambda/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@amzn/mock-typescript-lambda",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "description": "A mock lambda implementation for CDK infrastructure unit",
   "main": "index.ts",
   "scripts": {

diff --git a/source/infrastructure/test/mock-ui/package-lock.json b/source/infrastructure/test/mock-ui/package-lock.json
diff --git a/source/infrastructure/test/mock-ui/package.json b/source/infrastructure/test/mock-ui/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@amzn/mock-react-app",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "description": "Mock Reactjs app used for unit testing constructs",
   "devDependencies": {
     "@babel/plugin-proposal-private-property-in-object": "^7.21.11",

diff --git a/source/lambda/agentcore-invocation/poetry.lock b/source/lambda/agentcore-invocation/poetry.lock
diff --git a/source/lambda/agentcore-invocation/pyproject.toml b/source/lambda/agentcore-invocation/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "agent-invocation"
-version = "4.0.0"
+version = "4.0.1"
 authors = [ "Amazon Web Services" ]
 description = "Lambda implementation for agent invocation feature"
 packages = [

diff --git a/source/lambda/chat/poetry.lock b/source/lambda/chat/poetry.lock
diff --git a/source/lambda/chat/pyproject.toml b/source/lambda/chat/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "llm-chat-lambda"
-version = "4.0.0"
+version = "4.0.1"
 authors = [ "Amazon Web Services" ]
 description = "Lambda implementation for chat feature"
 packages = [

diff --git a/source/lambda/custom-authorizer/package-lock.json b/source/lambda/custom-authorizer/package-lock.json
diff --git a/source/lambda/custom-authorizer/package.json b/source/lambda/custom-authorizer/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@amzn/custom-authorizer",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "description": "This lambda function is used as a custom REQUEST authorizer for APIs",
   "main": "rest-handler.ts",
   "scripts": {

diff --git a/source/lambda/custom-resource/poetry.lock b/source/lambda/custom-resource/poetry.lock
diff --git a/source/lambda/custom-resource/pyproject.toml b/source/lambda/custom-resource/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "custom-resource"
-version = "4.0.0"
+version = "4.0.1"
 authors = [ "Amazon Web Services" ]
 description = "Perform specific operations triggered by AWS CloudFormation events"
 packages = [

diff --git a/source/lambda/ext-idp-group-mapper/poetry.lock b/source/lambda/ext-idp-group-mapper/poetry.lock
diff --git a/source/lambda/ext-idp-group-mapper/pyproject.toml b/source/lambda/ext-idp-group-mapper/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "ext-idp-group-mapper"
-version = "4.0.0"
+version = "4.0.1"
 authors = [ "Amazon Web Services" ]
 description = "Lambda implementation to change Cognito user groups to External Identity Provider groups in the JWT token"
 packages = [

diff --git a/source/lambda/feedback-management/package-lock.json b/source/lambda/feedback-management/package-lock.json
diff --git a/source/lambda/feedback-management/package.json b/source/lambda/feedback-management/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@amzn/feedback-management",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "description": "This lambda supports backs the API to process chat response feedbacks",
   "main": "index.ts",
   "scripts": {