CVE-2026-18140 | AWS aws-smithy-json up to 0.62.6 Unknown-Key Skip Path recursion

A vulnerability was found in AWS aws-smithy-json up to 0.62.6. It has been declared as problematic. The impacted element is an unknown function of the component Unknown-Key Skip Path. Such manipulation leads to uncontrolled recursion.

This vulnerability is listed as CVE-2026-18140. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More