Threats affecting pkg:npm/aws-sdk

CVE-2026-21830 is a low-severity vulnerability in HCL BigFix AEX version 13.0 caused by improper input validation in the aws-sdk package. This flaw may lead to AWS API requests being sent to unintended or non-AWS endpoints. The vulnerability does not impact integrity or availability and requires network access with high attack complexity and no privileges or user interaction. A patch is available, and the product is a cloud service with vendor-managed remediation.