Vulnerabilities
AWS Fixes Remote DoS Flaw in Smithy-RS JSON Parser
A recursion flaw in aws-smithy-json before version 0.62.7 allows unauthenticated remote denial of service via small HTTP requests with nested JSON.
Smithy-RS
Everything Threat Times has reported about Smithy-RS: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
AWS Fixes Unauthenticated Slowloris DoS Flaw in Smithy-RS HTTP Server
AWS released version 0.66.5 to patch CVE-2026-16756, which allowed unauthenticated denial-of-service attacks via resource exhaustion in the default server path.