Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

npm package

aws-advanced-nodejs-wrapper

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. High, CVSS 8.0npmAmendedPublished

    AWS Advanced NodeJS Wrapper: Privilege Escalation in Aurora PostgreSQL instance

    GHSA-8wj8-cfxr-9374

    Affected
    • npm aws-advanced-nodejs-wrapper < 2.0.1
    Fixed in
    2.0.1· Vendor fix available
    Issue
    of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users. AWS recommends that customers upgrade to the following version: AWS NodeJS Wrapper to v2.0.1. Source of Vulnerability Report: Allistair Ishmael Hakim allistair.hakim@gmail.com Affected products & versions: AWS NodeJS Wrapper < 2.0.1. Platforms: MacOS/Windows/Linux

    Recommended action: Upgrade to 2.0.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:osv.dev (1)github.com (2)Source checked Evidence →