CVE-2026-89090

Vendor

Amazon Web Services

Product

AWS services

CVSS

5.9

Exposure class

Cloud platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   AWS bulletin AWS 7d ago

   CVE-2026-89090 - Denial of service in the event stream header decoder in AWS SDK for Go v2

   CVE-2026-89090 Amazon Web Services
2. 8
   CVE NVD 11 Sep 2026

   An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote…

   An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream…

   CVSS 5.9 CVE-2026-89090 Amazon Web Services