A company has set up AWS CodeArtifact repositories with public upstream repositories The company's development team consumes open source dependencies…

Update the status of the affected CodeArtifact package version to deleted:

Deleting the vulnerable package version prevents it from being available for download by any users

or systems, ensuring that the compromised version is not consumed.

Update the CodeArtifact package origin control settings to allow direct publishing and to block

upstream operations:

By allowing direct publishing, the security team can publish the patched version of the package

directly to the CodeArtifact repository.

Blocking upstream operations prevents the repository from automatically fetching and serving the

vulnerable package version from upstream public repositories.

By deleting the vulnerable version and configuring the origin control settings to allow direct

publishing and block upstream operations, the company ensures that only the patched version is

available and the vulnerable version cannot be downloaded.

Reference:

Managing Package Versions in CodeArtifact

Package Origin Controls in CodeArtifact