Advisoriesby IbisAWSAWS-2026-061
Uncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows...
No fix yet
Uncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows unauthenticated remote denial of service via recursive shapes
Affected versions
The source does not list versions here. See the source advisory for affected products and fixes.
Changes since it was listed
Severity: Unrated to High
Details and references
More AWS advisories
All AWS
RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3...CVE-2026-110310no fix yetImproper Link Resolution in Auth.GetUserPrivateKey in AWS Research and Engineering StudioCVE-2026-14904no fix yetImproper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK...CVE-2026-12530no fix yetKey commitment policy bypass via shared key cache in AWS Encryption SDK for PythonCVE-2026-6550no fix yetLocal Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight AgentCVE-2026-7791no fix yetIssue with FreeRTOS-Plus-TCP - IPv6 Router Advertisement Memory Safety IssuesAWS-2026-023no fix yet