p PatchFirst

PatchFirst · Latest vulnerabilities

aws-advanced-nodejs-wrapper vulnerabilities

Vulnerabilities published for aws-advanced-nodejs-wrapper in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. GHSA-8wj8-cfxr-9374

    High · CVSS 8Fix available

    AWS Advanced NodeJS Wrapper: Privilege Escalation in Aurora PostgreSQL instance

    ### Description of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users. AWS recommends that customers upgrade to the following version: AWS NodeJS Wrapper to v2.0.1. ### Source of Vulnerability Report: Allistair Ishmael Hakim [[email protected]](mailto:[email protected]) ### Affected products & versions: AWS NodeJS Wrapper < 2.0.1. ### Platforms: MacOS/Windows/Linux

    aws-advanced-nodejs-wrapperNode.js
    • Update to 2.0.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →