Skip to content

Conversation

@nejidevelops
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade aws-sdk from 2.1110.0 to 2.1692.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 582 versions ahead of your current version.

  • The recommended version was released a year ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
medium severity Prototype Pollution
SNYK-JS-XML2JS-5414874
586 Proof of Concept
Release notes
Package name: aws-sdk
  • 2.1692.0 - 2024-11-06

    See changelog for more information.

  • 2.1691.0 - 2024-09-06

    See changelog for more information.

  • 2.1690.0 - 2024-09-05

    See changelog for more information.

  • 2.1689.0 - 2024-09-04

    See changelog for more information.

  • 2.1688.0 - 2024-09-03

    See changelog for more information.

  • 2.1687.0 - 2024-08-30

    See changelog for more information.

  • 2.1686.0 - 2024-08-29

    See changelog for more information.

  • 2.1685.0 - 2024-08-28

    See changelog for more information.

  • 2.1684.0 - 2024-08-27

    See changelog for more information.

  • 2.1683.0 - 2024-08-26

    See changelog for more information.

  • 2.1682.0 - 2024-08-23
  • 2.1681.0 - 2024-08-22
  • 2.1680.0 - 2024-08-21
  • 2.1679.0 - 2024-08-20
  • 2.1678.0 - 2024-08-19
  • 2.1677.0 - 2024-08-16
  • 2.1676.0 - 2024-08-15
  • 2.1675.0 - 2024-08-14
  • 2.1674.0 - 2024-08-13
  • 2.1673.0 - 2024-08-12
  • 2.1672.0 - 2024-08-09
  • 2.1671.0 - 2024-08-08
  • 2.1670.0 - 2024-08-07
  • 2.1669.0 - 2024-08-06
  • 2.1668.0 - 2024-08-05
  • 2.1667.0 - 2024-08-02
  • 2.1666.0 - 2024-08-01
  • 2.1665.0 - 2024-07-30
  • 2.1664.0 - 2024-07-25
  • 2.1663.0 - 2024-07-24
  • 2.1662.0 - 2024-07-23
  • 2.1661.0 - 2024-07-22
  • 2.1660.0 - 2024-07-22
  • 2.1659.0 - 2024-07-12
  • 2.1658.0 - 2024-07-10
  • 2.1657.0 - 2024-07-09
  • 2.1656.0 - 2024-07-08
  • 2.1655.0 - 2024-07-05
  • 2.1654.0 - 2024-07-03
  • 2.1653.0 - 2024-07-02
  • 2.1652.0 - 2024-07-01
  • 2.1651.0 - 2024-06-28
  • 2.1650.0 - 2024-06-27
  • 2.1649.0 - 2024-06-26
  • 2.1648.0 - 2024-06-25
  • 2.1647.0 - 2024-06-24
  • 2.1646.0 - 2024-06-20
  • 2.1645.0 - 2024-06-19
  • 2.1644.0 - 2024-06-18
  • 2.1643.0 - 2024-06-17
  • 2.1642.0 - 2024-06-14
  • 2.1641.0 - 2024-06-13
  • 2.1640.0 - 2024-06-12
  • 2.1639.0 - 2024-06-11
  • 2.1638.0 - 2024-06-10
  • 2.1637.0 - 2024-06-07
  • 2.1636.0 - 2024-06-06
  • 2.1635.0 - 2024-06-05
  • 2.1634.0 - 2024-06-04
  • 2.1633.0 - 2024-06-03
  • 2.1632.0 - 2024-05-31
  • 2.1631.0 - 2024-05-30
  • 2.1630.0 - 2024-05-29
  • 2.1629.0 - 2024-05-28
  • 2.1628.0 - 2024-05-24
  • 2.1627.0 - 2024-05-23
  • 2.1626.0 - 2024-05-22
  • 2.1625.0 - 2024-05-21
  • 2.1624.0 - 2024-05-20
  • 2.1623.0 - 2024-05-17
  • 2.1622.0 - 2024-05-16
  • 2.1621.0 - 2024-05-15
  • 2.1620.0 - 2024-05-14
  • 2.1619.0 - 2024-05-13
  • 2.1618.0 - 2024-05-10
  • 2.1617.0 - 2024-05-09
  • 2.1616.0 - 2024-05-08
  • 2.1615.0 - 2024-05-07
  • 2.1614.0 - 2024-05-06
  • 2.1613.0 - 2024-05-03
  • 2.1612.0 - 2024-05-02
  • 2.1611.0 - 2024-05-01
  • 2.1610.0 - 2024-04-30
  • 2.1609.0 - 2024-04-29
  • 2.1608.0 - 2024-04-26
  • 2.1607.0 - 2024-04-25
  • 2.1606.0 - 2024-04-24
  • 2.1605.0 - 2024-04-23
  • 2.1604.0 - 2024-04-22
  • 2.1603.0 - 2024-04-19
  • 2.1602.0 - 2024-04-18
  • 2.1601.0 - 2024-04-17
  • 2.1600.0 - 2024-04-16
  • 2.1599.0 - 2024-04-12
  • 2.1598.0 - 2024-04-11
  • 2.1597.0 - 2024-04-10
  • 2.1596.0 - 2024-04-09
  • 2.1595.0 - 2024-04-08
  • 2.1594.0 - 2024-04-05
  • 2.1593.0 - 2024-04-04
  • 2.1592.0 - 2024-04-03
  • 2.1591.0 - 2024-04-02
  • 2.1590.0 - 2024-04-01
  • 2.1589.0 - 2024-03-29
  • 2.1588.0 - 2024-03-28
  • 2.1587.0 - 2024-03-27
  • 2.1586.0 - 2024-03-26
  • 2.1585.0 - 2024-03-25
  • 2.1584.0 - 2024-03-22
  • 2.1583.0 - 2024-03-21
  • 2.1582.0 - 2024-03-20
  • 2.1581.0 - 2024-03-19
  • 2.1580.0 - 2024-03-18
  • 2.1579.0 - 2024-03-15
  • 2.1578.0 - 2024-03-14
  • 2.1577.0 - 2024-03-13
  • 2.1576.0 - 2024-03-12
  • 2.1575.0 - 2024-03-11
  • 2.1574.0 - 2024-03-08
  • 2.1573.0 - 2024-03-07
  • 2.1572.0 - 2024-03-06
  • 2.1571.0 - 2024-03-05
  • 2.1570.0 - 2024-03-04
  • 2.1569.0 - 2024-02-29
  • 2.1568.0 - 2024-02-28
  • 2.1567.0 - 2024-02-27
  • 2.1566.0 - 2024-02-26
  • 2.1565.0 - 2024-02-23
  • 2.1564.0 - 2024-02-22
  • 2.1563.0 - 2024-02-21
  • 2.1562.0 - 2024-02-20
  • 2.1561.0 - 2024-02-19
  • 2.1560.0 - 2024-02-16
  • 2.1559.0 - 2024-02-15
  • 2.1558.0 - 2024-02-14
  • 2.1557.0 - 2024-02-13
  • 2.1556.0 - 2024-02-12
  • 2.1555.0 - 2024-02-09
  • 2.1554.0 - 2024-02-08
  • 2.1553.0 - 2024-02-07
  • 2.1552.0 - 2024-02-06
  • 2.1551.0 - 2024-02-05
  • 2.1550.0 - 2024-02-02
  • 2.1549.0 - 2024-02-01
  • 2.1548.0 - 2024-01-31
  • 2.1547.0 - 2024-01-30
  • 2.1546.0 - 2024-01-29
  • 2.1545.0 - 2024-01-26
  • 2.1544.0 - 2024-01-25
  • 2.1543.0 - 2024-01-24
  • 2.1542.0 - 2024-01-23
  • 2.1541.0 - 2024-01-22
  • 2.1540.0 - 2024-01-19
  • 2.1539.0 - 2024-01-18
  • 2.1538.0 - 2024-01-17
  • 2.1537.0 - 2024-01-16
  • 2.1536.0 - 2024-01-14
  • 2.1535.0 - 2024-01-12
  • 2.1534.0 - 2024-01-11
  • 2.1533.0 - 2024-01-10
  • 2.1532.0 - 2024-01-08
  • 2.1531.0 - 2024-01-05
  • 2.1530.0 - 2024-01-04
  • 2.1529.0 - 2024-01-03
  • 2.1528.0 - 2023-12-29
  • 2.1527.0 - 2023-12-28
  • 2.1526.0 - 2023-12-27
  • 2.1525.0 - 2023-12-22
  • 2.1524.0 - 2023-12-21
  • 2.1523.0 - 2023-12-20
  • 2.1522.0 - 2023-12-19
  • 2.1521.0 - 2023-12-18
  • 2.1520.0 - 2023-12-15
  • 2.1519.0 - 2023-12-14
  • 2.1518.0 - 2023-12-13
  • 2.1517.0 - 2023-12-12
  • 2.1516.0 - 2023-12-11
  • 2.1515.0 - 2023-12-08
  • 2.1514.0 - 2023-12-07
  • 2.1513.0 - 2023-12-06
  • 2.1512.0 - 2023-12-05
  • 2.1511.0 - 2023-12-04
  • 2.1510.0 - 2023-12-01
  • 2.1509.0 - 2023-11-30
  • 2.1508.0 - 2023-11-30
  • 2.1507.0 - 2023-11-29
  • 2.1506.0 - 2023-11-28
  • 2.1505.0 - 2023-11-28
  • 2.1504.0 - 2023-11-27
  • 2.1503.0 - 2023-11-27
  • 2.1502.0 - 2023-11-22
  • 2.1501.0 - 2023-11-21
  • 2.1500.0 - 2023-11-20
  • 2.1499.0 - 2023-11-17
  • 2.1498.0 - 2023-11-16
  • 2.1497.0 - 2023-11-15
  • 2.1496.0 - 2023-11-14
  • 2.1495.0 - 2023-11-13
  • 2.1494.0 - 2023-11-10
  • 2.1493.0 - 2023-11-09
  • 2.1492.0 - 2023-11-09
  • 2.1491.0 - 2023-11-08
  • 2.1490.0 - 2023-11-07
  • 2.1489.0 - 2023-11-06
  • 2.1488.0 - 2023-11-03
  • 2.1487.0 - 2023-11-02
  • 2.1486.0 - 2023-11-01
  • 2.1485.0 - 2023-10-31
  • 2.1484.0 - 2023-10-30
  • 2.1483.0 - 2023-10-27
  • 2.1482.0 - 2023-10-26
  • 2.1481.0 - 2023-10-25
  • 2.1480.0 - 2023-10-24
  • 2.1479.0 - 2023-10-23
  • 2.1478.0 - 2023-10-20
  • 2.1477.0 - 2023-10-19
  • 2.1476.0 - 2023-10-18
  • 2.1475.0 - 2023-10-17
  • 2.1474.0 - 2023-10-16
  • 2.1473.0 - 2023-10-12
  • 2.1472.0 - 2023-10-06
  • 2.1471.0 - 2023-10-05
  • 2.1470.0 - 2023-10-04
  • 2.1469.0 - 2023-10-03
  • 2.1468.0 - 2023-10-02
  • 2.1467.0 - 2023-09-28
  • 2.1466.0 - 2023-09-27
  • 2.1465.0 - 2023-09-26
  • 2.1464.0 - 2023-09-25
  • 2.1463.0 - 2023-09-22
  • 2.1462.0 - 2023-09-20
  • 2.1461.0 - 2023-09-19
  • 2.1460.0 - 2023-09-18
  • 2.1459.0 - 2023-09-15
  • 2.1458.0 - 2023-09-14
  • 2.1457.0 - 2023-09-13
  • 2.1456.0 - 2023-09-12
  • 2.1455.0 - 2023-09-11
  • 2.1454.0 - 2023-09-08
  • 2.1453.0 - 2023-09-07
  • 2.1452.0 - 2023-09-06
  • 2.1451.0 - 2023-09-05
  • 2.1450.0 - 2023-09-01
  • 2.1449.0 - 2023-08-31
  • 2.1448.0 - 2023-08-30
  • 2.1447.0 - 2023-08-29
  • 2.1446.0 - 2023-08-28
  • 2.1445.0 - 2023-08-25
  • 2.1444.0 - 2023-08-24
  • 2.1443.0 - 2023-08-23
  • 2.1442.0 - 2023-08-22
  • 2.1441.0 - 2023-08-21
  • 2.1440.0 - 2023-08-18
  • 2.1439.0 - 2023-08-17
  • 2.1438.0 - 2023-08-16
  • 2.1437.0 - 2023-08-15
  • 2.1436.0 - 2023-08-14
  • 2.1435.0 - 2023-08-11
  • 2.1434.0 - 2023-08-10
  • 2.1433.0 - 2023-08-09
  • 2.1432.0 - 2023-08-08
  • 2.1431.0 - 2023-08-07
  • 2.1430.0 - 2023-08-04
  • 2.1429.0 - 2023-08-03
  • 2.1428.0 - 2023-08-02
  • 2.1427.0 - 2023-08-01
  • 2.1426.0 - 2023-07-31
  • 2.1425.0 - 2023-07-28
  • 2.1424.0 - 2023-07-27
  • 2.1423.0 - 2023-07-26
  • 2.1422.0 - 2023-07-25
  • 2.1421.0 - 2023-07-24
  • 2.1420.0 - 2023-07-21
  • 2.1419.0 - 2023-07-20
  • 2.1418.0 - 2023-07-19
  • 2.1417.0 - 2023-07-18
  • 2.1416.0 - 2023-07-17
  • 2.1415.0 - 2023-07-13
  • 2.1414.0 - 2023-07-11
  • 2.1413.0 - 2023-07-07
  • 2.1412.0 - 2023-07-06
  • 2.1411.0 - 2023-07-05
  • 2.1410.0 - 2023-07-03
  • 2.1409.0 - 2023-06-30
  • 2.1408.0 - 2023-06-29
  • 2.1407.0 - 2023-06-28
  • 2.1406.0 - 2023-06-27
  • 2.1405.0 - 2023-06-26
  • 2.1404.0 - 2023-06-23
  • 2.1403.0 - 2023-06-22
  • 2.1402.0 - 2023-06-21
  • 2.1401.0 - 2023-06-20
  • 2.1400.0 - 2023-06-19
  • 2.1399.0 - 2023-06-16
  • 2.1398.0 - 2023-06-15
  • 2.1397.0 - 2023-06-13
  • 2.1396.0 - 2023-06-12
  • 2.1395.0 - 2023-06-09
  • 2.1394.0 - 2023-06-08
  • 2.1393.0 - 2023-06-07
  • 2.1392.0 - 2023-06-06
  • 2.1391.0 - 2023-06-05
  • 2.1390.0 - 2023-06-02
  • 2.1389.0 - 2023-06-01
  • 2.1388.0 - 2023-05-31
  • 2.1387.0 - 2023-05-30
  • 2.1386.0 - 2023-05-26
  • 2.1385.0 - 2023-05-25
  • 2.1384.0 - 2023-05-24
  • 2.1383.0 - 2023-05-23
  • 2.1382.0 - 2023-05-22
  • 2.1381.0 - 2023-05-19
  • 2.1380.0 - 2023-05-18
  • 2.1379.0 - 2023-05-16
  • 2.1378.0 - 2023-05-15
  • 2.1377.0 - 2023-05-11
  • 2.1376.0 - 2023-05-10
  • 2.1375.0 - 2023-05-09
  • 2.1374.0 - 2023-05-08
  • 2.1373.0 - 2023-05-05
  • 2.1372.0 - 2023-05-04
  • 2.1371.0 - 2023-05-03
  • 2.1370.0 - 2023-05-02
  • 2.1369.0 - 2023-05-01
  • 2.1368.0 - 2023-04-28
  • 2.1367.0 - 2023-04-27
  • 2.1366.0 - 2023-04-26
  • 2.1365.0 - 2023-04-25
  • 2.1364.0 - 2023-04-24
  • 2.1363.0 - 2023-04-21
  • 2.1362.0 - 2023-04-20
  • 2.1361.0 - 2023-04-19
  • 2.1360.0 - 2023-04-17
  • 2.1359.0 - 2023-04-14
  • 2.1358.0 - 2023-04-13
  • 2.1357.0 - 2023-04-12
  • 2.1356.0 - 2023-04-11
  • 2.1355.0 - 2023-04-11
  • 2.1354.0 - 2023-04-10
  • 2.1353.0 - 2023-04-07
  • 2.1352.0 - 2023-04-06
  • 2.1351.0 - 2023-04-05
  • 2.1350.0 - 2023-04-04
  • 2.1349.0 - 2023-04-03
  • 2.1348.0 - 2023-03-31
  • 2.1347.0 - 2023-03-30
  • 2.1346.0 - 2023-03-29
  • 2.1345.0 - 2023-03-28
  • 2.1344.0 - 2023-03-27
  • 2.1343.0 - 2023-03-24
  • 2.1342.0 - 2023-03-23
  • 2.1341.0 - 2023-03-22
  • 2.1340.0 - 2023-03-21
  • 2.1339.0 - 2023-03-20
  • 2.1338.0 - 2023-03-17
  • 2.1337.0 - 2023-03-16
  • 2.1336.0 - 2023-03-15
  • 2.1335.0 - 2023-03-14
  • 2.1334.0 - 2023-03-13
  • 2.1333.0 - 2023-03-10
  • 2.1332.0 - 2023-03-09
  • 2.1331.0 - 2023-03-08
  • 2.1330.0 - 2023-03-07
  • 2.1329.0 - 2023-03-06
  • 2.1328.0 - 2023-03-03
  • 2.1327.0 - 2023-03-02
  • 2.1326.0 - 2023-03-01
  • 2.1325.0 - 2023-02-28
  • 2.1324.0 - 2023-02-27
  • 2.1323.0 - 2023-02-24
  • 2.1322.0 - 2023-02-23
  • 2.1321.0 - 2023-02-22
  • 2.1320.0 - 2023-02-21
  • 2.1319.0 - 2023-02-20
  • 2.1318.0 - 2023-02-17
  • 2.1317.0 - 2023-02-16
  • 2.1316.0 - 2023-02-15
  • 2.1315.0 - 2023-02-14
  • 2.1314.0 - 2023-02-13
  • 2.1313.0 - 2023-02-10
  • 2.1312.0 - 2023-02-09
  • 2.1311.0 - 2023-02-08
  • 2.1310.0 - 2023-02-06
  • 2.1309.0 - 2023-02-03
  • 2.1308.0 - 2023-02-02
  • 2.1307.0 - 2023-02-01
  • 2.1306.0 - 2023-01-31
  • 2.1305.0 - 2023-01-30
  • 2.1304.0 - 2023-01-27
  • 2.1303.0 - 2023-01-26
  • 2.1302.0 - 2023-01-25
  • 2.1301.0 - 2023-01-24
  • 2.1300.0 - 2023-01-23
  • 2.1299.0 - 2023-01-20
  • 2.1298.0 - 2023-01-19
  • 2.1297.0 - 2023-01-18
  • 2.1296.0 - 2023-01-17
  • 2.1295.0 - 2023-01-13
  • 2.1294.0 - 2023-01-12
  • 2.1293.0 - 2023-01-11
  • 2.1292.0 - 2023-01-10
  • 2.1291.0 - 2023-01-09
  • 2.1290.0 - 2023-01-06
  • 2.1289.0 - 2023-01-05
  • 2.1288.0 - 2023-01-04
  • 2.1287.0 - 2023-01-03
  • 2.1286.0 - 2022-12-30
  • 2.1285.0 - 2022-12-29
  • 2.1284.0 - 2022-12-28
  • 2.1283.0 - 2022-12-27
  • 2.1282.0 - 2022-12-23
  • 2.1281.0 - 2022-12-22
  • 2.1280.0 - 2022-12-21
  • 2.1279.0 - 2022-12-20
  • 2.1278.0 - 2022-12-19
  • 2.1277.0 - 2022-12-16
  • 2.1276.0 - 2022-12-15
  • 2.1275.0 - 2022-12-14
  • 2.1274.0 - 2022-12-13
  • 2.1273.0 - 2022-12-12
  • 2.1272.0 - 2022-12-09
  • 2.1271.0 - 2022-12-08
  • 2.1270.0 - 2022-12-07
  • 2.1269.0 - 2022-12-06
  • 2.1268.0 - 2022-12-05
  • 2.1267.0 - 2022-12-02
  • 2.1266.0 - 2022-12-01
  • 2.1265.0 - 2022-11-30
  • 2.1264.0 - 2022-11-29
  • 2.1263.0 - 2022-11-29
  • 2.1262.0 - 2022-11-28
  • 2.1261.0 - 2022-11-23
  • 2.1260.0 - 2022-11-22
  • 2.1259.0 - 2022-11-21
  • 2.1258.0 - 2022-11-18
  • 2.1257.0 - 2022-11-17
  • 2.1256.0 - 2022-11-16
  • 2.1255.0 - 2022-11-15
  • 2.1254.0 - 2022-11-14
  • 2.1253.0 - 2022-11-11
  • 2.1252.0 - 2022-11-10
  • 2.1251.0 - 2022-11-09
  • 2.1250.0 - 2022-11-08
  • 2.1249.0 - 2022-11-07
  • 2.1248.0 - 2022-11-04
  • 2.1247.0 - 2022-11-03
  • 2.1246.0 - 2022-11-02
  • 2.1245.0 - 2022-11-01
  • 2.1244.0 - 2022-10-31
  • 2.1243.0 - 2022-10-28
  • 2.1242.0 - 2022-10-27
  • 2.1241.0 - 2022-10-26
  • 2.1240.0 - 2022-10-25
  • 2.1239.0 - 2022-10-24
  • 2.1238.0 - 2022-10-21
  • 2.1237.0 - 2022-10-20
  • 2.1236.0 - 2022-10-19
  • 2.1235.0 - 2022-10-18
  • 2.1234.0 - 2022-10-17
  • 2.1233.0 - 2022-10-14
  • 2.1232.0 - 2022-10-13
  • 2.1231.0 - 2022-10-07
  • 2.1230.0 - 2022-10-05
  • 2.1229.0 - 2022-10-04
  • 2.1228.0 - 2022-10-03
  • 2.1227.0 - 2022-09-30
  • 2.1226.0 - 2022-09-29
  • 2.1225.0 - 2022-09-27
  • 2.1224.0 - 2022-09-26
  • 2.1223.0 - 2022-09-23
  • 2.1222.0 - 2022-09-22
  • 2.1221.0 - 2022-09-21
  • 2.1220.0 - 2022-09-20
  • 2.1219.0 - 2022-09-19
  • 2.1218.0 - 2022-09-16
  • 2.1217.0 - 2022-09-15
  • 2.1216.0 - 2022-09-14
  • 2.1215.0 - 2022-09-13
  • 2.1214.0 - 2022-09-12
  • 2.1213.0 - 2022-09-09
  • 2.1212.0 - 2022-09-08
  • 2.1211.0 - 2022-09-07
  • 2.1210.0 - 2022-09-06
  • 2.1209.0 - 2022-09-02
  • 2.1208.0 - 2022-09-01
  • 2.1207.0 - 2022-09-01
  • 2.1206.0 - 2022-08-30
  • 2.1205.0 - 2022-08-29
  • 2.1204.0 - 2022-08-26
  • 2.1203.0 - 2022-08-25
  • 2.1202.0 - 2022-08-24
  • 2.1201.0 - 2022-08-23
  • 2.1200.0 - 2022-08-22
  • 2.1199.0 - 2022-08-19
  • 2.1198.0 - 2022-08-18
  • 2.1197.0 - 2022-08-17
  • 2.1196.0 - 2022-08-16
  • 2.1195.0 - 2022-08-15
  • 2.1194.0 - 2022-08-12
  • 2.1193.0 - 2022-08-11
  • 2.1192.0 - 2022-08-10
  • 2.1191.0 - 2022-08-09
  • 2.1190.0 - 2022-08-08
  • 2.1189.0 - 2022-08-04
  • 2.1188.0 - 2022-08-03
  • 2.1187.0 - 2022-08-02
  • 2.1186.0 - 2022-08-01
  • 2.1185.0 - 2022-07-29
  • 2.1184.0 - 2022-07-28
  • 2.1183.0 - 2022-07-27
  • 2.1182.0 - 2022-07-26
  • 2.1181.0 - 2022-07-22
  • 2.1180.0 - 2022-07-21
  • 2.1179.0 - 2022-07-20
  • 2.1178.0 - 2022-07-19
  • 2.1177.0 - 2022-07-18
  • 2.1176.0 - 2022-07-15
  • 2.1175.0 - 2022-07-14
  • 2.1174.0 - 2022-07-13
  • 2.1173.0 - 2022-07-12
  • 2.1172.0 - 2022-07-11
  • 2.1171.0 - 2022-07-08
  • 2.1170.0 - 2022-07-07
  • 2.1169.0 - 2022-07-06
  • 2.1168.0 - 2022-07-05
  • 2.1167.0 - 2022-07-01
  • 2.1166.0 - 2022-06-30
  • 2.1165.0 - 2022-06-29
  • 2.1164.0 - 2022-06-28
  • 2.1163.0 - 2022-06-27
  • 2.1162.0 - 2022-06-24
  • 2.1161.0 - 2022-06-23
  • 2.1160.0 - 2022-06-22
  • 2.1159.0 - 2022-06-21
  • 2.1158.0 - 2022-06-20
  • 2.1157.0 - 2022-06-17
  • 2.1156.0 - 2022-06-16
  • 2.1155.0 - 2022-06-15
  • 2.1154.0 - 2022-06-14
  • 2.1153.0 - 2022-06-13
  • 2.1152.0 - 2022-06-09
  • 2.1151.0 - 2022-06-08
  • 2.1150.0 - 2022-06-07
  • 2.1149.0 - 2022-06-06
  • 2.1148.0 - 2022-06-02
  • 2.1147.0 - 2022-06-01
  • 2.1146.0 - 2022-05-31
  • 2.1145.0 - 2022-05-27
  • 2.1144.0 - 2022-05-26
  • 2.1143.0 - 2022-05-25
  • 2.1142.0 - 2022-05-24
  • 2.1141.0 - 2022-05-23
  • 2.1140.0 - 2022-05-20
  • 2.1139.0 - 2022-05-19
  • 2.1138.0 - 2022-05-18
  • 2.1137.0 - 2022-05-17
  • 2.1136.0 - 2022-05-16
  • 2.1135.0 - 2022-05-13
  • 2.1134.0 - 2022-05-12
  • 2.1133.0 - 2022-05-11
  • 2.1132.0 - 2022-05-10
  • 2.1131.0 - 2022-05-09
  • 2.1130.0 - 2022-05-06
  • 2.1129.0 - 2022-05-05
  • 2.1128.0 - 2022-05-04
  • 2.1127.0 - 2022-05-03
  • 2.1126.0 - 2022-05-02
  • 2.1125.0 - 2022-04-29
  • 2.1124.0 - 2022-04-28
  • 2.1123.0 - 2022-04-27
  • 2.1122.0 - 2022-04-26
  • 2.1121.0 - 2022-04-25
  • 2.1120.0 - 2022-04-22
  • 2.1119.0 - 2022-04-21
  • 2.1118.0 - 2022-04-20
  • 2.1117.0 - 2022-04-19
  • 2.1116.0 - 2022-04-15
  • 2.1115.0 - 2022-04-14
  • 2.1114.0 - 2022-04-13
  • 2.1113.0 - 2022-04-12
  • 2.1112.0 - 2022-04-11
  • 2.1111.0 - 2022-04-08
  • 2.1110.0 - 2022-04-07
from aws-sdk GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade aws-sdk from 2.1110.0 to 2.1692.0.

See this package in npm:
aws-sdk

See this project in Snyk:
https://app.snyk.io/org/mohammadnewton/project/bde5e92e-44d2-4afe-bb19-47589c413558?utm_source=github&utm_medium=referral&page=upgrade-pr
@gemini-code-assist
Copy link

Summary of Changes

Hello @nejidevelops, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request focuses on enhancing the project's security and stability by performing a substantial update of the aws-sdk dependency. The upgrade targets a known 'Prototype Pollution' vulnerability and brings the project's AWS integration up to the latest recommended version, incorporating numerous bug fixes and improvements accumulated over the past year.

Highlights

  • Dependency Upgrade: The aws-sdk dependency has been upgraded from version 2.1110.0 to 2.1692.0, a jump of 582 versions.
  • Security Fix: This upgrade addresses a critical 'Prototype Pollution' vulnerability (SNYK-JS-XML2JS-5414874) by updating aws-sdk and its associated transitive dependencies.
  • Automated Update: This pull request was automatically generated by Snyk to ensure dependencies are kept up-to-date and secure.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request, automatically generated by Snyk, upgrades the aws-sdk package from version 2.1110.0 to 2.1692.0. This is a necessary update to resolve a medium-severity Prototype Pollution vulnerability (SNYK-JS-XML2JS-5414874). The change itself is correct.

While reviewing, I identified two important points:

  1. CRITICAL: Outdated axios dependency with vulnerability.
    The project uses axios@^0.18.0, which resolves to 0.18.1. This version is deprecated and has a critical security vulnerability (SSRF), as noted in the package-lock.json deprecation message. It is crucial to upgrade axios to a patched version, for example ^1.7.2 (latest stable). Since this PR is focused on security, I highly recommend addressing this in a follow-up PR immediately.

  2. HIGH: AWS SDK v2 is in maintenance mode.
    I've added a comment recommending a migration from AWS SDK v2 to v3. The v3 SDK is the current standard, offering modularity, better performance, and is actively maintained. Planning this migration will be beneficial for the project's long-term health and security.

In summary, the change in this PR is correct and can be merged. However, the axios vulnerability should be treated with high priority.

"license": "ISC",
"dependencies": {
"aws-sdk": "^2.1110.0",
"aws-sdk": "^2.1692.0",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

While this upgrade fixes the security vulnerability, it's important to note that AWS SDK for JavaScript v2 is now in maintenance mode. AWS strongly recommends migrating to v3 of the SDK.

Migrating to AWS SDK v3 offers several advantages:

  • Modularity: You only bundle the packages you need, which can significantly reduce your application's size. For this function, you would only need @aws-sdk/client-cloudwatch.
  • Improved Performance: V3 is designed to be more performant.
  • First-class TypeScript support.

Consider creating a follow-up task to migrate from aws-sdk v2 to v3 to keep the project up-to-date and secure in the long term.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants