Skip to content
OpenAdvisories

Package · npm

aws-sdk

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.7
    GHSA-j965-2qgj-vjmq

    JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3

    CVSSv3.1 Rating: 3.7 (LOW) Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid…

    aws-sdk npm
  • High 7.3
    CVE-2020-28472

    Prototype Pollution

    This affects the package @aws-sdk/shared-ini-file-loader before 1.0.0-rc.9; the package aws-sdk before 2.814.0. If an attacker submits a malicious INI file to an application that parses it with loadSharedConfigFiles , they will pollute the prototype on the ap…

    aws-sdk @aws-sdk/shared-ini-file-loader npm