https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T11:59:54.836378+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-18140 CVE-2026-18140 — Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in… 2026-10-02T11:59:55.051689+00:00

Affected: aws-smithy-json

Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the smithy-rs code generator invokes from every generated struct deserializer, might allow remote unauthenticated users to cause a denial of service (process abort via stack exhaustion) via a single small HTTP request containing deeply nested JSON to a smithy-rs generated server.

To remediate this issue, users should upgrade to aws-smithy-json 0.62.7 or later and rebuild.