What’s Vulnerable › Products

aws-smithy-http-server vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your aws-smithy-http-server version is affected

Latest aws-smithy-http-server vulnerabilities

• CVE-2026-16756 — Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service (CVSS 7.5)