aws / aws/aws-lambda-nodejs-runtime-interface-client
AWS Inspector findings for curl
- Ngôn ngữ chính
- TypeScript
- Star
- 224
- Fork
- 60
- Chỉ số merge pull request
- Không có pull request nào được merge trong 30 ngày
Mô tả
The current curl version used from the "deps" folder has several findings in AWS inspector.
All findings suggest different fix versions while the highest suggested one is 8.17.0. Can you please upgrade the curl version to avoid these vulnerabilities?
The following findings are shown to us in the AWS Inspector:
https://nvd.nist.gov/vuln/detail/CVE-2022-32221
https://nvd.nist.gov/vuln/detail/CVE-2023-38545
https://nvd.nist.gov/vuln/detail/CVE-2023-23914
https://nvd.nist.gov/vuln/detail/CVE-2022-32207
https://nvd.nist.gov/vuln/detail/CVE-2023-27533
https://nvd.nist.gov/vuln/detail/CVE-2023-28319
https://nvd.nist.gov/vuln/detail/CVE-2024-2398
https://nvd.nist.gov/vuln/detail/CVE-2025-9086
https://nvd.nist.gov/vuln/detail/CVE-2022-42915
https://nvd.nist.gov/vuln/detail/CVE-2023-27534
https://nvd.nist.gov/vuln/detail/CVE-2022-42916
https://nvd.nist.gov/vuln/detail/CVE-2022-43551
https://nvd.nist.gov/vuln/detail/CVE-2025-0725
https://nvd.nist.gov/vuln/detail/CVE-2022-32208
https://nvd.nist.gov/vuln/detail/CVE-2022-43552
https://nvd.nist.gov/vuln/detail/CVE-2022-32206
https://nvd.nist.gov/vuln/detail/CVE-2023-27536
https://nvd.nist.gov/vuln/detail/CVE-2023-46218
https://nvd.nist.gov/vuln/detail/CVE-2024-8096
https://nvd.nist.gov/vuln/detail/CVE-2023-27535
https://nvd.nist.gov/vuln/detail/CVE-2023-28321
https://nvd.nist.gov/vuln/detail/CVE-2022-32205
https://nvd.nist.gov/vuln/detail/CVE-2024-7264
https://nvd.nist.gov/vuln/detail/CVE-2023-27538
https://nvd.nist.gov/vuln/detail/CVE-2025-10966
https://nvd.nist.gov/vuln/detail/CVE-2023-23916
https://nvd.nist.gov/vuln/detail/CVE-2024-9681
https://nvd.nist.gov/vuln/detail/CVE-2023-23915
https://nvd.nist.gov/vuln/detail/CVE-2023-28320
https://nvd.nist.gov/vuln/detail/CVE-2022-35252
https://nvd.nist.gov/vuln/detail/CVE-2023-28322
https://nvd.nist.gov/vuln/detail/CVE-2023-38546
https://nvd.nist.gov/vuln/detail/CVE-2024-11053
https://nvd.nist.gov/vuln/detail/CVE-2025-0167
Hướng dẫn đóng góp
Hướng nghiên cứu
Bắt đầu bằng cách xác định phiên bản curl trong thư mục deps và kiểm tra cách dependency đó được build hoặc validate. Nâng cấp nó lên 8.17.0, sau đó chạy các kiểm tra của repository hiện có cho thay đổi dependency; được xem là hoàn tất khi các phát hiện AWS Inspector được liệt kê không còn được báo cáo.
Do mô hình lập chỉ mục viết ra từ nội dung của issue.
Đánh giá
- Lĩnh vực
- security
- Loại issue
- Lỗi
- Độ khó
- 2/5
- Thời gian dự kiến
- 1-3 giờ
- Mức độ hoạt động
- Đình trệ
- Độ rõ ràng
- Khá rõ ràng
- Mức phù hợp với người mới
- 38/100