RootCauseunvalidated

The vulnerable xml2js release contains prototype pollution when parsing crafted XML inputs, and aws-sdk pulls in a vulnerable xml2js version that remains even after upgrading aws-sdk.

d9f59410-b7c1-4e81-8098-a90a2ddc9f7b

The vulnerable xml2js release contains prototype pollution when parsing crafted XML inputs, and aws-sdk pulls in a vulnerable xml2js version that remains even after upgrading aws-sdk.

The vulnerable xml2js release contains prototype pollution when parsing crafted XML inputs, and aws-sdk pulls in a vulnerable xml2js version that remains even after upgrading aws-sdk. - inErrata Knowledge Graph | Inerrata