6503 matches found
CVE-2026-18140 Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers
Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the smithy-rs code generator invokes from every generated struct deserializer, might allow remote unauthenticated users to cause a denial of service process abort via stack exhaustion via...
CLEANSTART-2026-EG54450 Security fixes in crossplane-provider-aws 2.3.0-r0
Package crossplane-provider-aws version 2.3.0-r0 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61731, CVE-2025-68119, CVE-2025-61730...
CLEANSTART-2026-PY52453 Security fixes in velero-plugin-for-aws 1.13.1-r0
Package velero-plugin-for-aws version 1.13.1-r0 fixes 1 vulnerabilities: CVE-2025-61729...
CLEANSTART-2026-DJ44755 Security fixes in aws-privateca-issuer-fips 1.7.0-r1
Package aws-privateca-issuer-fips version 1.7.0-r1 fixes 23 vulnerabilities: CVE-2026-39820, CVE-2026-25679, CVE-2026-42499, CVE-2026-33814, CVE-2026-27143...
CLEANSTART-2026-IQ62750 Security fixes in velero-plugin-for-aws 1.12.2-r4
Package velero-plugin-for-aws version 1.12.2-r4 fixes 8 vulnerabilities: ghsa-xmrv-pmrh-hhx2, CVE-2026-33810, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282...
CLEANSTART-2026-MD27911 Security fixes in aws-cli 2.35.9-r1
Package aws-cli version 2.35.9-r1 fixes 2 vulnerabilities: CVE-2026-45186, CVE-2026-41080...
CLEANSTART-2026-DP84010 Security fixes in velero-plugin-for-aws 1.12.2-r6
Package velero-plugin-for-aws version 1.12.2-r6 fixes 12 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...
CLEANSTART-2026-GF88325 Security fixes in velero-plugin-for-aws 1.10.1-r1
Package velero-plugin-for-aws version 1.10.1-r1 fixes 9 vulnerabilities: CVE-2025-68121, CVE-2026-25679, CVE-2025-61726, CVE-2025-61728, CVE-2026-27142...
CLEANSTART-2026-RB88310 Security fixes in aws-eks-pod-identity-agent 0.1.36-r0
Package aws-eks-pod-identity-agent version 0.1.36-r0 fixes 33 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732...
CLEANSTART-2026-GY32533 Security fixes in velero-plugin-for-aws 1.13.0-r0
Package velero-plugin-for-aws version 1.13.0-r0 fixes 10 vulnerabilities: CVE-2025-47912, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188...
CLEANSTART-2026-ZU68768 Security fixes in aws-network-policy-agent 1.3.2-r1
Package aws-network-policy-agent version 1.3.2-r1 fixes 21 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821, CVE-2026-25680...
CLEANSTART-2026-QS96651 Security fixes in cloud-provider-aws-1.34 1.34.1-r1
Package cloud-provider-aws-1.34 version 1.34.1-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wnfv, ghsa-j5w8-q4qc-rx2x...
CLEANSTART-2026-XV62240 Security fixes in velero-plugin-for-aws 1.12.2-r7
Package velero-plugin-for-aws version 1.12.2-r7 fixes 3 vulnerabilities: CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...
CLEANSTART-2026-LR68332 Security fixes in velero-plugin-for-aws 1.13.2-r2
Package velero-plugin-for-aws version 1.13.2-r2 fixes 5 vulnerabilities: CVE-2026-56852, CVE-2026-39822, CVE-2026-42505, ghsa-xmrv-pmrh-hhx2, CVE-2026-33186...
PT-2026-86017
Package aws-network-policy-agent version 1.3.2-r0 fixes 1 vulnerabilities: ghsa-xmrv-pmrh-hhx2...
CVE-2026-18140: Uncontrolled Recursion
Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the smithy-rs code generator invokes from every generated struct deserializer, might allow remote unauthenticated users to cause a denial of service process abort via stack exhaustion via...
CVE-2026-18245: Improper Control of Generation of Code
Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote authenticated user to execute arbitrary code in end-user browsers, developer machines, CI/CD environments, and server-side rendering contexts via crafted Studio component or theme schema...
PT-2026-66566
Name of the Vulnerable Software and Affected Versions aws-smithy-json versions prior to 0.62.7 Description Uncontrolled recursion occurs in the unknown-key skip path of the runtime crate, which is invoked by the smithy-rs code generator from every generated struct deserializer. This allows remote...
