AWS SDK for JavaScript Acm Client for Node.js, Browser and React Native
92%
Total Score
healthy
Frequent releases and active AWS maintenance make this a strong dependency despite minor repository transparency gaps.
The repository name does not match the package and its root README does not mention it, which is a transparency gap; however, the repository is an AWS SDK monorepo and its tree contains the client family, making the linkage plausible.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10170 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @aws-sdk/client-acm is vulnerable to Insertion of Sensitive Information into Log File in versions 3.349.0 - 3.610.0. | 3.349.0 - 3.610.0 | Low |
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.6.2 | — | — |
@smithy/core Version ^3.35.2 | — | — |
@aws-sdk/core Version ^3.978.3 | — | — |
@smithy/types Version ^4.19.0 | — | — |
@aws-sdk/types Version ^3.974.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.