smithy-lang/smithy-rs Security Advisories | GitStock

high2026-10-02

aws-smithy-json: Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers

GHSA-8ffr-xgwf-xj56 · CVE-2026-18140

high2026-07-24

Smithy-RS: Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

GHSA-jvxp-qmx7-gjpx · CVE-2026-16756