Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/aws-sdk@2.454.0
purl pkg:npm/aws-sdk@2.454.0
Next non-vulnerable version 2.814.0
Latest non-vulnerable version 2.814.0
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-w11s-s2tz-nyeu
Aliases:
CVE-2020-28472
GHSA-rrc9-gqf8-8rwg
Prototype pollution In aws-sdk/shared-ini-file-loader, if an attacker submits a malicious INI file to an application that parses it with loadSharedConfigFiles, they will pollute the prototype on the application. This can be exploited further depending on the context.
2.814.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T20:43:33.490684+00:00 GitLab Importer Affected by VCID-w11s-s2tz-nyeu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/aws-sdk/CVE-2020-28472.yml 38.6.0