CVE-2026-89090

24 advisories.

Go/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream CVE-2026-89090: medium 5.9

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

Action: Upgrade github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream to 1.7.8 or later.

go get github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.8

Affected

introduced	fixed	last affected
0	1.7.8	-

Fixed versions

1.7.8

Sources

CVE-2026-89090 · published 2026-04-08T00:18:56Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/bedrockagentcore CVE-2026-89090: medium 5.9

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/bedrockagentcore to 1.15.2 or later.

go get github.com/aws/aws-sdk-go-v2/service/bedrockagentcore@v1.15.2

Affected

introduced	fixed	last affected
0	1.15.2	-

Fixed versions

1.15.2

Sources

CVE-2026-89090 · published 2026-04-08T00:18:56Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime CVE-2026-89090: medium 5.9

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime to 1.51.8 or later.

go get github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime@v1.51.8

Affected

introduced	fixed	last affected
0	1.51.8	-

Fixed versions

1.51.8

Sources

CVE-2026-89090 · published 2026-04-08T00:18:56Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/bedrockruntime CVE-2026-89090: medium 5.9

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/bedrockruntime to 1.50.4 or later.

go get github.com/aws/aws-sdk-go-v2/service/bedrockruntime@v1.50.4

Affected

introduced	fixed	last affected
0	1.50.4	-

Fixed versions

1.50.4

Sources

CVE-2026-89090 · published 2026-04-08T00:18:56Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs CVE-2026-89090: medium 5.9

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to 1.65.0 or later.

go get github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.65.0

Affected

introduced	fixed	last affected
0	1.65.0	-

Fixed versions

1.65.0

Sources

CVE-2026-89090 · published 2026-04-08T00:18:56Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/iotsitewise CVE-2026-89090: medium 5.9

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/iotsitewise to 1.52.19 or later.

go get github.com/aws/aws-sdk-go-v2/service/iotsitewise@v1.52.19

Affected

introduced	fixed	last affected
0	1.52.19	-

Fixed versions

1.52.19

Sources

CVE-2026-89090 · published 2026-04-08T00:18:56Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/kinesis CVE-2026-89090: medium 5.9

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/kinesis to 1.43.5 or later.

go get github.com/aws/aws-sdk-go-v2/service/kinesis@v1.43.5

Affected

introduced	fixed	last affected
0	1.43.5	-

Fixed versions

1.43.5

Sources

CVE-2026-89090 · published 2026-04-08T00:18:56Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/lambda CVE-2026-89090: medium 5.9

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/lambda to 1.88.5 or later.

go get github.com/aws/aws-sdk-go-v2/service/lambda@v1.88.5

Affected

introduced	fixed	last affected
0	1.88.5	-

Fixed versions

1.88.5

Sources

CVE-2026-89090 · published 2026-04-08T00:18:56Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/lexruntimev2 CVE-2026-89090: medium 5.9

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/lexruntimev2 to 1.35.15 or later.

go get github.com/aws/aws-sdk-go-v2/service/lexruntimev2@v1.35.15

Affected

introduced	fixed	last affected
0	1.35.15	-

Fixed versions

1.35.15

Sources

CVE-2026-89090 · published 2026-04-08T00:18:56Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/s3 CVE-2026-89090: medium 5.9

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/s3 to 1.97.3 or later.

go get github.com/aws/aws-sdk-go-v2/service/s3@v1.97.3

Affected

introduced	fixed	last affected
0	1.97.3	-

Fixed versions

1.97.3

Sources

CVE-2026-89090 · published 2026-04-08T00:18:56Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/sagemakerruntime CVE-2026-89090: medium 5.9

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/sagemakerruntime to 1.39.6 or later.

go get github.com/aws/aws-sdk-go-v2/service/sagemakerruntime@v1.39.6

Affected

introduced	fixed	last affected
0	1.39.6	-

Fixed versions

1.39.6

Sources

CVE-2026-89090 · published 2026-04-08T00:18:56Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/transcribestreaming CVE-2026-89090: medium 5.9

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/transcribestreaming to 1.34.5 or later.

go get github.com/aws/aws-sdk-go-v2/service/transcribestreaming@v1.34.5

Affected

introduced	fixed	last affected
0	1.34.5	-

Fixed versions

1.34.5

Sources

CVE-2026-89090 · published 2026-04-08T00:18:56Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream CVE-2026-89090: unknown

DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

Action: Upgrade github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream to 1.7.8 or later.

go get github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.8

Affected

introduced	fixed	last affected
0	1.7.8	-

Fixed versions

1.7.8

Sources

CVE-2026-89090 · published 2026-07-07T16:52:19Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/bedrockagentcore CVE-2026-89090: unknown

DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/bedrockagentcore to 1.15.2 or later.

go get github.com/aws/aws-sdk-go-v2/service/bedrockagentcore@v1.15.2

Affected

introduced	fixed	last affected
0	1.15.2	-

Fixed versions

1.15.2

Sources

CVE-2026-89090 · published 2026-07-07T16:52:19Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime CVE-2026-89090: unknown

DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime to 1.51.8 or later.

go get github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime@v1.51.8

Affected

introduced	fixed	last affected
0	1.51.8	-

Fixed versions

1.51.8

Sources

CVE-2026-89090 · published 2026-07-07T16:52:19Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/bedrockruntime CVE-2026-89090: unknown

DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/bedrockruntime to 1.50.4 or later.

go get github.com/aws/aws-sdk-go-v2/service/bedrockruntime@v1.50.4

Affected

introduced	fixed	last affected
0	1.50.4	-

Fixed versions

1.50.4

Sources

CVE-2026-89090 · published 2026-07-07T16:52:19Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs CVE-2026-89090: unknown

DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to 1.65.0 or later.

go get github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs@v1.65.0

Affected

introduced	fixed	last affected
0	1.65.0	-

Fixed versions

1.65.0

Sources

CVE-2026-89090 · published 2026-07-07T16:52:19Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/iotsitewise CVE-2026-89090: unknown

DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/iotsitewise to 1.52.19 or later.

go get github.com/aws/aws-sdk-go-v2/service/iotsitewise@v1.52.19

Affected

introduced	fixed	last affected
0	1.52.19	-

Fixed versions

1.52.19

Sources

CVE-2026-89090 · published 2026-07-07T16:52:19Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/kinesis CVE-2026-89090: unknown

DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/kinesis to 1.43.5 or later.

go get github.com/aws/aws-sdk-go-v2/service/kinesis@v1.43.5

Affected

introduced	fixed	last affected
0	1.43.5	-

Fixed versions

1.43.5

Sources

CVE-2026-89090 · published 2026-07-07T16:52:19Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/lambda CVE-2026-89090: unknown

DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/lambda to 1.88.5 or later.

go get github.com/aws/aws-sdk-go-v2/service/lambda@v1.88.5

Affected

introduced	fixed	last affected
0	1.88.5	-

Fixed versions

1.88.5

Sources

CVE-2026-89090 · published 2026-07-07T16:52:19Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/lexruntimev2 CVE-2026-89090: unknown

DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/lexruntimev2 to 1.35.15 or later.

go get github.com/aws/aws-sdk-go-v2/service/lexruntimev2@v1.35.15

Affected

introduced	fixed	last affected
0	1.35.15	-

Fixed versions

1.35.15

Sources

CVE-2026-89090 · published 2026-07-07T16:52:19Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/s3 CVE-2026-89090: unknown

DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/s3 to 1.97.3 or later.

go get github.com/aws/aws-sdk-go-v2/service/s3@v1.97.3

Affected

introduced	fixed	last affected
0	1.97.3	-

Fixed versions

1.97.3

Sources

CVE-2026-89090 · published 2026-07-07T16:52:19Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/sagemakerruntime CVE-2026-89090: unknown

DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/sagemakerruntime to 1.39.6 or later.

go get github.com/aws/aws-sdk-go-v2/service/sagemakerruntime@v1.39.6

Affected

introduced	fixed	last affected
0	1.39.6	-

Fixed versions

1.39.6

Sources

CVE-2026-89090 · published 2026-07-07T16:52:19Z · modified 2026-09-12T04:10:37.759930105Z · JSON

Go/github.com/aws/aws-sdk-go-v2/service/transcribestreaming CVE-2026-89090: unknown

DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

Action: Upgrade github.com/aws/aws-sdk-go-v2/service/transcribestreaming to 1.34.5 or later.

go get github.com/aws/aws-sdk-go-v2/service/transcribestreaming@v1.34.5

Affected

introduced	fixed	last affected
0	1.34.5	-

Fixed versions

1.34.5

Sources

CVE-2026-89090 · published 2026-07-07T16:52:19Z · modified 2026-09-12T04:10:37.759930105Z · JSON