p PatchFirst

PatchFirst · Latest vulnerabilities

@aws-sdk/shared-ini-file-loader vulnerabilities

Vulnerabilities published for @aws-sdk/shared-ini-file-loader in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2020-28472

    High · CVSS 7.3EPSS 2.17%Fix available

    Prototype Pollution

    This affects the package @aws-sdk/shared-ini-file-loader before 1.0.0-rc.9; the package aws-sdk before 2.814.0. If an attacker submits a malicious INI file to an application that parses it with loadSharedConfigFiles , they will pollute the prototype on the application. This can be exploited further depending on the context.

    @aws-sdk/shared-ini-file-loaderNode.js
    • Update to 1.0.0-rc.9
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →