GO-2026-5764

See a problem?
Please try reporting it to the source first.

Source

https://pkg.go.dev/vuln/GO-2026-5764

Import Source

https://vuln.go.dev/ID/GO-2026-5764.json

JSON Data

https://api.osv.dev/v1/vulns/GO-2026-5764

Aliases

GHSA-xmrv-pmrh-hhx2

Published

2026-07-07T16:52:19Z

Modified

2026-07-07T20:30:14.966449124Z

Summary

DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

Details

DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

Database specific

{
    "url": "https://pkg.go.dev/vuln/GO-2026-5764",
    "review_status": "REVIEWED"
}

References

Affected packages

github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

Package

Name: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream; View open source insights on deps.dev
Purl: pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.7.8

Database specific

source

"https://vuln.go.dev/ID/GO-2026-5764.json"

github.com/aws/aws-sdk-go-v2/service/bedrockagentcore

Package

Name: github.com/aws/aws-sdk-go-v2/service/bedrockagentcore; View open source insights on deps.dev
Purl: pkg:golang/github.com/aws/aws-sdk-go-v2/service/bedrockagentcore

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.15.2

Database specific

source

"https://vuln.go.dev/ID/GO-2026-5764.json"

github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime

Package

Name: github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime; View open source insights on deps.dev
Purl: pkg:golang/github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.51.8

Database specific

source

"https://vuln.go.dev/ID/GO-2026-5764.json"

github.com/aws/aws-sdk-go-v2/service/bedrockruntime

Package

Name: github.com/aws/aws-sdk-go-v2/service/bedrockruntime; View open source insights on deps.dev
Purl: pkg:golang/github.com/aws/aws-sdk-go-v2/service/bedrockruntime

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.50.4

Database specific

source

"https://vuln.go.dev/ID/GO-2026-5764.json"

github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs

Package

Name: github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs; View open source insights on deps.dev
Purl: pkg:golang/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.65.0

Database specific

source

"https://vuln.go.dev/ID/GO-2026-5764.json"

github.com/aws/aws-sdk-go-v2/service/iotsitewise

Package

Name: github.com/aws/aws-sdk-go-v2/service/iotsitewise; View open source insights on deps.dev
Purl: pkg:golang/github.com/aws/aws-sdk-go-v2/service/iotsitewise

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.52.19

Database specific

source

"https://vuln.go.dev/ID/GO-2026-5764.json"

github.com/aws/aws-sdk-go-v2/service/kinesis

Package

Name: github.com/aws/aws-sdk-go-v2/service/kinesis; View open source insights on deps.dev
Purl: pkg:golang/github.com/aws/aws-sdk-go-v2/service/kinesis

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.43.5

Database specific

source

"https://vuln.go.dev/ID/GO-2026-5764.json"

github.com/aws/aws-sdk-go-v2/service/lambda

Package

Name: github.com/aws/aws-sdk-go-v2/service/lambda; View open source insights on deps.dev
Purl: pkg:golang/github.com/aws/aws-sdk-go-v2/service/lambda

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.88.5

Database specific

source

"https://vuln.go.dev/ID/GO-2026-5764.json"

github.com/aws/aws-sdk-go-v2/service/lexruntimev2

Package

Name: github.com/aws/aws-sdk-go-v2/service/lexruntimev2; View open source insights on deps.dev
Purl: pkg:golang/github.com/aws/aws-sdk-go-v2/service/lexruntimev2

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.35.15

Database specific

source

"https://vuln.go.dev/ID/GO-2026-5764.json"

github.com/aws/aws-sdk-go-v2/service/s3

Package

Name: github.com/aws/aws-sdk-go-v2/service/s3; View open source insights on deps.dev
Purl: pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.97.3

Database specific

source

"https://vuln.go.dev/ID/GO-2026-5764.json"

github.com/aws/aws-sdk-go-v2/service/sagemakerruntime

Package

Name: github.com/aws/aws-sdk-go-v2/service/sagemakerruntime; View open source insights on deps.dev
Purl: pkg:golang/github.com/aws/aws-sdk-go-v2/service/sagemakerruntime

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.39.6

Database specific

source

"https://vuln.go.dev/ID/GO-2026-5764.json"

github.com/aws/aws-sdk-go-v2/service/transcribestreaming

Package

Name: github.com/aws/aws-sdk-go-v2/service/transcribestreaming; View open source insights on deps.dev
Purl: pkg:golang/github.com/aws/aws-sdk-go-v2/service/transcribestreaming

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.34.5

Database specific

source

"https://vuln.go.dev/ID/GO-2026-5764.json"