Amazon Aws-smithy-json — known CVE vulnerabilities

Every CVE whose affected-product data names Amazon Aws-smithy-json, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-18140 — CVSS 7.5 (high): Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the smithy-rs code generator…