https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:27:29.394008+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-89090 CVE-2026-89090 — Denial of service in the event stream header decoder in AWS SDK for Go v2 2026-10-02T10:27:29.408974+00:00

Affected: AWS SDK for Go v2

An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outside the valid range.

To remediate this issue, users should upgrade to release-2026-03-23 or later, and patch any forked or derivative code.