https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T08:25:41.847569+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-175446 EUVD-2026-175446 2026-10-07T08:25:41.850506+00:00 EUVD-2026-175446 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28472 fkie_cve-2020-28472 2026-10-07T08:25:41.850545+00:00

This affects the package @aws-sdk/shared-ini-file-loader before 1.0.0-rc.9; the package aws-sdk before 2.814.0. If an attacker submits a malicious INI file to an application that parses it with loadSharedConfigFiles , they will pollute the prototype on the application. This can be exploited further depending on the context.

 https://cve.radiocsirt.org/vuln/ghsa-rrc9-gqf8-8rwg GHSA-rrc9-gqf8-8rwg — Prototype Pollution via file load in aws-sdk and @aws-sdk/shared-ini-file-loader 2026-10-07T08:25:41.850612+00:00

Affected: npm: aws-sdk, npm: @aws-sdk/shared-ini-file-loader

This affects the package @aws-sdk/shared-ini-file-loader before 1.0.0-rc.9; the package aws-sdk before 2.814.0. If an attacker submits a malicious INI file to an application that parses it with loadSharedConfigFiles , they will pollute the prototype on the application. This can be exploited further depending on the context.

 https://cve.radiocsirt.org/vuln/gsd-2020-28472 gsd-2020-28472 2026-10-07T08:25:41.850639+00:00 gsd-2020-28472