VYPR

AWS SDK Js

by AWS

Source repositories

CVEs (2)

  • CVE-2022-31159Jul 15, 2022
    risk 0.00cvss epss 0.00

    The AWS SDK for Java enables Java developers to work with Amazon Web Services. A partial-path traversal issue exists within the `downloadDirectory` method in the AWS S3 TransferManager component of the AWS SDK for Java v1 prior to version 1.12.261. Applications using the SDK…

  • CVE-2020-28472Jan 19, 2021
    risk 0.00cvss epss 0.02

    This affects the package @aws-sdk/shared-ini-file-loader before 1.0.0-rc.9; the package aws-sdk before 2.814.0. If an attacker submits a malicious INI file to an application that parses it with loadSharedConfigFiles , they will pollute the prototype on the application. This can…