https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T08:27:55.868653+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-89090 CVE-2026-89090 — Denial of service in the event stream header decoder in AWS SDK for Go v2 2026-09-30T08:27:55.870116+00:00

Affected: AWS SDK for Go v2

An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outside the valid range.

To remediate this issue, users should upgrade to release-2026-03-23 or later, and patch any forked or derivative code.