Update @aws-sdk/client-s3 to resolve critical-severity vulnerabilities

[cb1kenobi]

@aws-sdk/client-s3 has several dependencies which have vulnerabilities, however the most important one is the fast-xml-parser dependency which has a critical vulnerability:

• fast-xml-parser has RangeError DoS Numeric Entities Bug - GHSA-37qj-frw5-hhjh
• fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names - GHSA-m7jm-9gc2-mpf2
• fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit) - GHSA-jmr7-xgp7-cmfj
• fast-xml-parser has stack overflow in XMLBuilder with preserveOrder - GHSA-fj3w-jwp8-x2g3
• fast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278) - GHSA-8gc5-j5rx-235r

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​aws-sdk/​client-s3@​3.964.0 ⏵ 3.1012.0	+1		+1	+1

View full report