aws-sdk-rust vulnerabilities

CVEs whose affected-version data names the aws-sdk-rust package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-15957High· 7.5

3mo ago

Uncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows unauthenticated remote denial of service via recursive shapes

Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service implementations. Uncontrolled recursion in the JSON,…

▾ TwilightAWS · aws-sdk-rustEPSS 0.75%via CVEORG