EUVD-2026-1417

JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3...

GHSA-J965-2QGJ-VJMQ JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3

CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. Per the AWS shared responsibilit...

Malicious code in spitshine (npm)

The package spitshine was found to contain malicious code...

MAL-2024-11275 Malicious code in @marfeel/eslint-config-js (npm)

--- -= Per source details. Do not edit below this line.=-...

The vulnerability of the LLHTTP component of the NodeJS object manipulation software allows attackers to enhance their privileges.

The vulnerability of the LLHTTP component in the NodeJS object manipulation software lies in inconsistencies during the interpretation of HTTP request headers. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...