early signals AWS security bulletins infra

CVE-2026-89090 - Denial of service in the event stream header decoder in AWS SDK for Go v2

// AI summary

AWS SDK for Go v2 has a denial of service vulnerability, CVE-2026-89090, located in the event stream header decoder.

// from the source

Read this article
Read at aws.amazon.com ↗ More from AWS security bulletins

# more from AWS security bulletins

  1. AWS security bulletins infra

    CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

    aws.amazon.com
  2. AWS security bulletins infra

    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

    aws.amazon.com
  3. AWS security bulletins infra

    CVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents Tools

    aws.amazon.com
  4. AWS security bulletins infra

    CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

    aws.amazon.com
  5. AWS security bulletins infra

    CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass

    aws.amazon.com