AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AWSAWS-2026-110

Denial of service in the event stream header decoder in AWS SDK for Go v2

AWS

CVE-2026-89090 · Published Oct 25, 2026

Medium5.9
No fix yet
AWS advisory

Read this article

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Changes since it was listed

SeveritySep 27Severity: Unrated to Medium
Details and references
Severity from
NVD

More AWS advisories

All AWS
Medium 5.9Oct 25XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePluginCVE-2026-18061no fix yetCritical 9.9Oct 25Server-side request forgery in the Session Manager port forwarding functionality in AWS...CVE-2026-89049no fix yetHigh 7.1Oct 25Issue with projen - Path traversal and OS command injectionCVE-2026-89065no fix yetCritical 9.1Oct 25Integer overflow in tensor buffer validation in Deep Java LibraryCVE-2026-85228no fix yetMedium 6.8Oct 25eMudhra intermediate CA key recovery in AWS trust bundlesCVE-2026-111943no fix yetHigh 8.7Oct 25Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch DashboardsCVE-2026-84942no fix yet