Vulnerability Report: GO-2026-5764

Affected Modules

• Path
  Go Versions
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
  before v1.7.8
• github.com/aws/aws-sdk-go-v2/service/bedrockagentcore
  before v1.15.2
• github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime
  before v1.51.8
• github.com/aws/aws-sdk-go-v2/service/bedrockruntime
  before v1.50.4
• github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs
  before v1.65.0
• github.com/aws/aws-sdk-go-v2/service/iotsitewise
  before v1.52.19
• github.com/aws/aws-sdk-go-v2/service/kinesis
  before v1.43.5
• github.com/aws/aws-sdk-go-v2/service/lambda
  before v1.88.5
• github.com/aws/aws-sdk-go-v2/service/lexruntimev2
  before v1.35.15
• github.com/aws/aws-sdk-go-v2/service/s3
  before v1.97.3
• github.com/aws/aws-sdk-go-v2/service/sagemakerruntime
  before v1.39.6
• github.com/aws/aws-sdk-go-v2/service/transcribestreaming
  before v1.34.5

Aliases

• GHSA-xmrv-pmrh-hhx2

References

• https://github.com/aws/aws-sdk-go-v2/security/advisories/GHSA-xmrv-pmrh-hhx2
• https://github.com/aws/aws-sdk-go-v2/releases/tag/release-2026-03-23
• https://vuln.go.dev/ID/GO-2026-5764.json

Feedback