Product

AWS github.com/aws/aws-sdk-go-v2/service/lambda vulnerabilities

1 published CVE affecting AWS github.com/aws/aws-sdk-go-v2/service/lambda, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest AWS github.com/aws/aws-sdk-go-v2/service/lambda CVEs

Newest publication first

CVE-2026-89090 Denial of service in the event stream header decoder in AWS SDK for Go v2
Published 2026-09-11

HighCVSS 8.2

An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outsid...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

AWS github.com/aws/aws-sdk-go-v2/service/lambda vulnerabilities

Latest AWS github.com/aws/aws-sdk-go-v2/service/lambda CVEs

CVE-2026-89090 Denial of service in the event stream header decoder in AWS SDK for Go v2