aws-advanced-nodejs-wrapper@1.0.0 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the aws-advanced-nodejs-wrapper package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Uncontrolled Search Path Element

aws-advanced-nodejs-wrapper is a License NPM Version

Affected versions of this package are vulnerable to Uncontrolled Search Path Element due to unqualified SQL function and operator references in the database dialect components. An attacker can execute malicious code with elevated privileges by creating crafted functions with names that match system functions, which are invoked instead of the intended system functions.

How to fix Uncontrolled Search Path Element?

Upgrade aws-advanced-nodejs-wrapper to version 2.0.1 or higher.

<2.0.1