GHSA-g59m-gf8j-gjf5
Low · 3.7CVSS
3.7
EPSS
—
Published
Jan 8, 2026
CISA due date
—
The record
AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | aws-sdk-accessanalyzer | 0 | 1.96.0 |
| crates.io | aws-sdk-account | 0 | 1.92.0 |
| crates.io | aws-sdk-acm | 0 | 1.92.0 |
| crates.io | aws-sdk-acmpca | 0 | 1.94.0 |
| crates.io | aws-sdk-aiops | 0 | 1.18.0 |
| crates.io | aws-sdk-amp | 0 | 1.95.0 |
| crates.io | aws-sdk-amplify | 0 | 1.98.0 |
| crates.io | aws-sdk-amplifybackend | 0 | 1.89.0 |
| crates.io | aws-sdk-amplifyuibuilder | 0 | 1.89.0 |
| crates.io | aws-sdk-apigateway | 0 | 1.92.0 |
| crates.io | aws-sdk-apigatewaymanagement | 0 | 1.89.0 |
| crates.io | aws-sdk-apigatewayv2 | 0 | 1.91.0 |
| crates.io | aws-sdk-appconfig | 0 | 1.94.0 |
| crates.io | aws-sdk-appconfigdata | 0 | 1.89.0 |
| crates.io | aws-sdk-appfabric | 0 | 1.89.0 |
| crates.io | aws-sdk-appflow | 0 | 1.89.0 |
| crates.io | aws-sdk-appintegrations | 0 | 1.90.0 |
| crates.io | aws-sdk-applicationautoscaling | 0 | 1.95.0 |
| crates.io | aws-sdk-applicationcostprofiler | 0 | 1.89.0 |
| crates.io | aws-sdk-applicationdiscovery | 0 | 1.91.0 |
| crates.io | aws-sdk-applicationinsights | 0 | 1.90.0 |
| crates.io | aws-sdk-applicationsignals | 0 | 1.67.0 |
| crates.io | aws-sdk-appmesh | 0 | 1.89.0 |
| crates.io | aws-sdk-apprunner | 0 | 1.90.0 |
| crates.io | aws-sdk-appstream | 0 | 1.95.0 |
| crates.io | aws-sdk-appsync | 0 | 1.102.0 |
| crates.io | aws-sdk-arcregionswitch | 0 | 1.9.0 |
| crates.io | aws-sdk-arczonalshift | 0 | 1.93.0 |
| crates.io | aws-sdk-artifact | 0 | 1.79.0 |
| crates.io | aws-sdk-athena | 0 | 1.94.0 |
| crates.io | aws-sdk-auditmanager | 0 | 1.93.0 |
| crates.io | aws-sdk-autoscaling | 0 | 1.100.0 |
| crates.io | aws-sdk-autoscalingplans | 0 | 1.89.0 |
| crates.io | aws-sdk-b2bi | 0 | 1.96.0 |
| crates.io | aws-sdk-backup | 0 | 1.96.0 |
| crates.io | aws-sdk-backupgateway | 0 | 1.89.0 |
| crates.io | aws-sdk-backupsearch | 0 | 1.38.0 |
| crates.io | aws-sdk-batch | 0 | 1.100.0 |
| crates.io | aws-sdk-bcmdashboards | 0 | 1.7.0 |
| crates.io | aws-sdk-bcmdataexports | 0 | 1.86.0 |
| crates.io | aws-sdk-bcmpricingcalculator | 0 | 1.44.0 |
| crates.io | aws-sdk-bcmrecommendedactions | 0 | 1.7.0 |
| crates.io | aws-sdk-bedrock | 0 | 1.120.0 |
| crates.io | aws-sdk-bedrockagent | 0 | 1.119.0 |
| crates.io | aws-sdk-bedrockagentcore | 0 | 1.17.0 |
| crates.io | aws-sdk-bedrockagentcorecontrol | 0 | 1.21.0 |
| crates.io | aws-sdk-bedrockagentruntime | 0 | 1.116.0 |
| crates.io | aws-sdk-bedrockdataautomation | 0 | 1.42.0 |
| crates.io | aws-sdk-bedrockdataautomationruntime | 0 | 1.40.0 |
| crates.io | aws-sdk-bedrockruntime | 0 | 1.113.0 |
| crates.io | aws-sdk-billing | 0 | 1.43.0 |
| crates.io | aws-sdk-billingconductor | 0 | 1.90.0 |
| crates.io | aws-sdk-braket | 0 | 1.92.0 |
| crates.io | aws-sdk-budgets | 0 | 1.96.0 |
| crates.io | aws-sdk-chatbot | 0 | 1.79.0 |
| crates.io | aws-sdk-chime | 0 | 1.90.0 |
| crates.io | aws-sdk-chimesdkidentity | 0 | 1.89.0 |
| crates.io | aws-sdk-chimesdkmediapipelines | 0 | 1.91.0 |
| crates.io | aws-sdk-chimesdkmeetings | 0 | 1.91.0 |
| crates.io | aws-sdk-chimesdkmessaging | 0 | 1.90.0 |
| crates.io | aws-sdk-chimesdkvoice | 0 | 1.93.0 |
| crates.io | aws-sdk-cleanrooms | 0 | 1.107.0 |
| crates.io | aws-sdk-cleanroomsml | 0 | 1.93.0 |
| crates.io | aws-sdk-cloud9 | 0 | 1.90.0 |
| crates.io | aws-sdk-cloudcontrol | 0 | 1.90.0 |
| crates.io | aws-sdk-clouddirectory | 0 | 1.89.0 |
| crates.io | aws-sdk-cloudformation | 0 | 1.99.0 |
| crates.io | aws-sdk-cloudfront | 0 | 1.102.0 |
| crates.io | aws-sdk-cloudfrontkeyvaluestore | 0 | 1.88.0 |
| crates.io | aws-sdk-cloudhsm | 0 | 1.89.0 |
| crates.io | aws-sdk-cloudhsmv2 | 0 | 1.92.0 |
| crates.io | aws-sdk-cloudsearch | 0 | 1.89.0 |
| crates.io | aws-sdk-cloudsearchdomain | 0 | 1.89.0 |
| crates.io | aws-sdk-cloudtrail | 0 | 1.96.0 |
| crates.io | aws-sdk-cloudtraildata | 0 | 1.89.0 |
| crates.io | aws-sdk-cloudwatch | 0 | 1.97.0 |
| crates.io | aws-sdk-cloudwatchevents | 0 | 1.89.0 |
| crates.io | aws-sdk-cloudwatchlogs | 0 | 1.107.0 |
| crates.io | aws-sdk-codeartifact | 0 | 1.92.0 |
| crates.io | aws-sdk-codebuild | 0 | 1.113.0 |
| crates.io | aws-sdk-codecatalyst | 0 | 1.89.0 |
| crates.io | aws-sdk-codecommit | 0 | 1.90.0 |
| crates.io | aws-sdk-codeconnections | 0 | 1.73.0 |
| crates.io | aws-sdk-codedeploy | 0 | 1.91.0 |
| crates.io | aws-sdk-codeguruprofiler | 0 | 1.89.0 |
| crates.io | aws-sdk-codegurureviewer | 0 | 1.89.0 |
| crates.io | aws-sdk-codegurusecurity | 0 | 1.89.0 |
| crates.io | aws-sdk-codepipeline | 0 | 1.99.0 |
| crates.io | aws-sdk-codestarconnections | 0 | 1.91.0 |
| crates.io | aws-sdk-codestarnotifications | 0 | 1.89.0 |
| crates.io | aws-sdk-cognitoidentity | 0 | 1.90.0 |
| crates.io | aws-sdk-cognitoidentityprovider | 0 | 1.103.0 |
| crates.io | aws-sdk-cognitosync | 0 | 1.89.0 |
| crates.io | aws-sdk-comprehend | 0 | 1.89.0 |
| crates.io | aws-sdk-comprehendmedical | 0 | 1.89.0 |
| crates.io | aws-sdk-computeoptimizer | 0 | 1.93.0 |
| crates.io | aws-sdk-config | 0 | 1.94.0 |
| crates.io | aws-sdk-connect | 0 | 1.136.0 |
| crates.io | aws-sdk-connectcampaigns | 0 | 1.91.0 |
| crates.io | aws-sdk-connectcampaignsv2 | 0 | 1.41.0 |
| crates.io | aws-sdk-connectcases | 0 | 1.97.0 |
| crates.io | aws-sdk-connectcontactlens | 0 | 1.91.0 |
| crates.io | aws-sdk-connectparticipant | 0 | 1.93.0 |
| crates.io | aws-sdk-controlcatalog | 0 | 1.74.0 |
| crates.io | aws-sdk-controltower | 0 | 1.95.0 |
| crates.io | aws-sdk-costandusagereport | 0 | 1.90.0 |
| crates.io | aws-sdk-costexplorer | 0 | 1.101.0 |
| crates.io | aws-sdk-costoptimizationhub | 0 | 1.94.0 |
| crates.io | aws-sdk-customerprofiles | 0 | 1.98.0 |
| crates.io | aws-sdk-databasemigration | 0 | 1.98.0 |
| crates.io | aws-sdk-databrew | 0 | 1.89.0 |
| crates.io | aws-sdk-dataexchange | 0 | 1.92.0 |
| crates.io | aws-sdk-datapipeline | 0 | 1.89.0 |
| crates.io | aws-sdk-datasync | 0 | 1.97.0 |
| crates.io | aws-sdk-datazone | 0 | 1.112.0 |
| crates.io | aws-sdk-dax | 0 | 1.90.0 |
| crates.io | aws-sdk-deadline | 0 | 1.83.0 |
| crates.io | aws-sdk-detective | 0 | 1.90.0 |
| crates.io | aws-sdk-devicefarm | 0 | 1.92.0 |
| crates.io | aws-sdk-devopsguru | 0 | 1.89.0 |
| crates.io | aws-sdk-directconnect | 0 | 1.93.0 |
| crates.io | aws-sdk-directory | 0 | 1.94.0 |
| crates.io | aws-sdk-directoryservicedata | 0 | 1.46.0 |
| crates.io | aws-sdk-dlm | 0 | 1.89.0 |
| crates.io | aws-sdk-docdb | 0 | 1.96.0 |
| crates.io | aws-sdk-docdbelastic | 0 | 1.91.0 |
| crates.io | aws-sdk-drs | 0 | 1.92.0 |
| crates.io | aws-sdk-dsql | 0 | 1.44.0 |
| crates.io | aws-sdk-dynamodb | 0 | 1.98.0 |
| crates.io | aws-sdk-dynamodbstreams | 0 | 1.90.0 |
| crates.io | aws-sdk-ebs | 0 | 1.89.0 |
| crates.io | aws-sdk-ec2 | 0 | 1.181.0 |
| crates.io | aws-sdk-ec2instanceconnect | 0 | 1.89.0 |
| crates.io | aws-sdk-ecr | 0 | 1.98.0 |
| crates.io | aws-sdk-ecrpublic | 0 | 1.92.0 |
| crates.io | aws-sdk-ecs | 0 | 1.104.0 |
| crates.io | aws-sdk-efs | 0 | 1.92.0 |
| crates.io | aws-sdk-eks | 0 | 1.113.0 |
| crates.io | aws-sdk-eksauth | 0 | 1.86.0 |
| crates.io | aws-sdk-elasticache | 0 | 1.95.0 |
| crates.io | aws-sdk-elasticbeanstalk | 0 | 1.90.0 |
| crates.io | aws-sdk-elasticloadbalancing | 0 | 1.90.0 |
| crates.io | aws-sdk-elasticloadbalancingv2 | 0 | 1.99.0 |
| crates.io | aws-sdk-elasticsearch | 0 | 1.92.0 |
| crates.io | aws-sdk-elastictranscoder | 0 | 1.90.0 |
| crates.io | aws-sdk-emr | 0 | 1.96.0 |
| crates.io | aws-sdk-emrcontainers | 0 | 1.95.0 |
| crates.io | aws-sdk-emrserverless | 0 | 1.97.0 |
| crates.io | aws-sdk-entityresolution | 0 | 1.98.0 |
| crates.io | aws-sdk-eventbridge | 0 | 1.96.0 |
| crates.io | aws-sdk-evidently | 0 | 1.89.0 |
| crates.io | aws-sdk-evs | 0 | 1.19.0 |
| crates.io | aws-sdk-finspace | 0 | 1.93.0 |
| crates.io | aws-sdk-finspacedata | 0 | 1.89.0 |
| crates.io | aws-sdk-firehose | 0 | 1.97.0 |
| crates.io | aws-sdk-fis | 0 | 1.92.0 |
| crates.io | aws-sdk-fms | 0 | 1.93.0 |
| crates.io | aws-sdk-forecast | 0 | 1.89.0 |
| crates.io | aws-sdk-forecastquery | 0 | 1.89.0 |
| crates.io | aws-sdk-frauddetector | 0 | 1.89.0 |
| crates.io | aws-sdk-freetier | 0 | 1.87.0 |
| crates.io | aws-sdk-fsx | 0 | 1.100.0 |
| crates.io | aws-sdk-gamelift | 0 | 1.96.0 |
| crates.io | aws-sdk-gameliftstreams | 0 | 1.31.0 |
| crates.io | aws-sdk-geomaps | 0 | 1.44.0 |
| crates.io | aws-sdk-geoplaces | 0 | 1.43.0 |
| crates.io | aws-sdk-georoutes | 0 | 1.43.0 |
| crates.io | aws-sdk-glacier | 0 | 1.89.0 |
| crates.io | aws-sdk-globalaccelerator | 0 | 1.91.0 |
| crates.io | aws-sdk-glue | 0 | 1.128.0 |
| crates.io | aws-sdk-grafana | 0 | 1.91.0 |
| crates.io | aws-sdk-greengrass | 0 | 1.89.0 |
| crates.io | aws-sdk-greengrassv2 | 0 | 1.90.0 |
| crates.io | aws-sdk-groundstation | 0 | 1.92.0 |
| crates.io | aws-sdk-guardduty | 0 | 1.103.0 |
| crates.io | aws-sdk-health | 0 | 1.89.0 |
| crates.io | aws-sdk-healthlake | 0 | 1.92.0 |
| crates.io | aws-sdk-iam | 0 | 1.95.0 |
| crates.io | aws-sdk-identitystore | 0 | 1.89.0 |
| crates.io | aws-sdk-imagebuilder | 0 | 1.96.0 |
| crates.io | aws-sdk-inspector | 0 | 1.89.0 |
| crates.io | aws-sdk-inspector2 | 0 | 1.99.0 |
| crates.io | aws-sdk-inspectorscan | 0 | 1.89.0 |
| crates.io | aws-sdk-internetmonitor | 0 | 1.94.0 |
| crates.io | aws-sdk-invoicing | 0 | 1.40.0 |
| crates.io | aws-sdk-iot | 0 | 1.100.0 |
| crates.io | aws-sdk-iotanalytics | 0 | 1.89.0 |
| crates.io | aws-sdk-iotdataplane | 0 | 1.90.0 |
| crates.io | aws-sdk-iotdeviceadvisor | 0 | 1.90.0 |
| crates.io | aws-sdk-iotevents | 0 | 1.90.0 |
| crates.io | aws-sdk-ioteventsdata | 0 | 1.89.0 |
| crates.io | aws-sdk-iotfleetwise | 0 | 1.96.0 |
| crates.io | aws-sdk-iotjobsdataplane | 0 | 1.90.0 |
| crates.io | aws-sdk-iotmanagedintegrations | 0 | 1.31.0 |
| crates.io | aws-sdk-iotsecuretunneling | 0 | 1.90.0 |
| crates.io | aws-sdk-iotsitewise | 0 | 1.96.0 |
| crates.io | aws-sdk-iotthingsgraph | 0 | 1.89.0 |
| crates.io | aws-sdk-iottwinmaker | 0 | 1.89.0 |
| crates.io | aws-sdk-iotwireless | 0 | 1.95.0 |
| crates.io | aws-sdk-ivs | 0 | 1.95.0 |
Related vulnerabilities
- CVE-2026-113786 pypdf is a free and open-source pure-python PDF library. CWE-20
- CVE-2026-112081 A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. CWE-20
- CVE-2026-111869 A vulnerability was identified in makeplane plane up to 1.4.2. CWE-20
- CVE-2026-100347 kin-openapi is a Go project for handling OpenAPI files. CWE-20
- CVE-2026-99999 In the Linux kernel, the following vulnerability has been resolved: ipv4: validate… CWE-20
- CVE-2026-107726 Hazelcast is a unified real-time data platform combining stream processing with a fast… CWE-20
- CVE-2026-105757 vLLM is an inference and serving engine for large language models. CWE-20
- CVE-2026-105756 vLLM is an inference and serving engine for large language models. CWE-20