javascriptaws/aws-sdk-js #4387Not a task: already works

xml2js is vulnerable to prototype pollution(short issue description)

envgap__aws__aws-sdk-js-4387

Original GitHub issue ↗Dated source checkout ↗Opened 2023-04-10

01 / FAILURE SIGNATURE

As reported upstream

When I run **npm i** or **npm ci** I get the error and the installation process fails.

Not a benchmark task.

The project already builds and runs before the fix, so there is nothing to repair.

02 / ENVIRONMENT RECIPE

Base commit: 56ad952b39efbe26393af9dd80f168ff7ccd8cd6
Manifest: package.json
Reproduce: Awaiting issue-specific recipe
Run under trace: Awaiting a meaningful runtime command

03 / ORIGINAL ISSUE TEXT

aws/aws-sdk-js #4387 · read the original issue

### Describe the bug

When I run **npm i** or **npm ci** I get the error and the installation process fails. 







### Expected Behavior

npm ci should run successfully.

### Current Behavior

Getting bellow error,

- 2 high severity vulnerabilities



This is what I got from running **npm audit**

![Screenshot 2023-04-10 at 1 48 13 PM](https://user-images.githubusercontent.com/33250282/230860079-b9406963-2fed-4e3b-b4dd-f4a0403927fe.png)

### Reproduction Steps

running npm i or npm ci

### Possible Solution

_No response_

### Additional Information/Context

_No response_

### SDK version used

2.1353.0

### Environment details (OS name and version, etc.)

macOS Monterey 12.6.1

Continue on GitHub ↗

04 / LABELS

Labels from the report text only; not yet run

No supported category has been assigned.

Label rules and the text that matched

[]