security(gomod): 🛡️ minor 🛡️ vulnerability [medium] by renovate[bot] · Pull Request #199 · DelineaXPM/dsv-cli

renovate · 2026-04-08T05:53:15Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	`v1.6.2` → `v1.7.8`
github.com/aws/aws-sdk-go-v2/service/s3	`v1.55.1` → `v1.97.3`

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

GHSA-xmrv-pmrh-hhx2

More information

Details

CVSSv3.1 Rating: [Medium]
CVSSv3.1 Score: [5.9]
CVSSv3.1 Vector String: [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H]

Summary and Impact

An issue exists in the the EventStream header decoder in AWS SDK for Go v2 in versions predating 2026-03-23. An actor can send a malformed EventStream response frame containing a crafted header value type byte outside the valid range, which can cause the host process to terminate.

Impacted versions: < 2026-03-23

Patches

This issue has been addressed in versions 2026-03-23 and above. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.

Workarounds

Not Applicable

References

If you have any questions or comments about this advisory, we ask that you contact [AWS/Amazon] Security via our vulnerability reporting page or directly via email to aws-security@amazon.com. Please do not create a public GitHub issue.

Severity

CVSS Score: 5.9 / 10 (Medium)
Vector String: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

GHSA-xmrv-pmrh-hhx2

More information

Details

CVSSv3.1 Rating: [Medium]
CVSSv3.1 Score: [5.9]
CVSSv3.1 Vector String: [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H]

Summary and Impact

An issue exists in the the EventStream header decoder in AWS SDK for Go v2 in versions predating 2026-03-23. An actor can send a malformed EventStream response frame containing a crafted header value type byte outside the valid range, which can cause the host process to terminate.

Impacted versions: < 2026-03-23

Patches

This issue has been addressed in versions 2026-03-23 and above. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.

Workarounds

Not Applicable

References

If you have any questions or comments about this advisory, we ask that you contact [AWS/Amazon] Security via our vulnerability reporting page or directly via email to aws-security@amazon.com. Please do not create a public GitHub issue.

Severity

CVSS Score: 5.9 / 10 (Medium)
Vector String: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

Release Notes

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream)

`v1.7.7`

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2/feature/dynamodb/expression: v1.7.79
- Bug Fix: allow nested list indices in expressions
github.com/aws/aws-sdk-go-v2/service/connectcontactlens: v1.28.0
- Feature: Making sentiment optional for ListRealtimeContactAnalysisSegments Response depending on conversational analytics configuration
github.com/aws/aws-sdk-go-v2/service/detective: v1.33.0
- Feature: Add support for Detective DualStack endpoints
github.com/aws/aws-sdk-go-v2/service/dynamodb: v1.42.4
- Documentation: Doc only update for API descriptions.
github.com/aws/aws-sdk-go-v2/service/marketplaceentitlementservice: v1.29.0
- Feature: Add support for Marketplace Entitlement Service dual-stack endpoints for CN and GOV regions
github.com/aws/aws-sdk-go-v2/service/marketplacemetering: v1.29.0
- Feature: Add support for Marketplace Metering Service dual-stack endpoints for CN regions
github.com/aws/aws-sdk-go-v2/service/verifiedpermissions: v1.23.0
- Feature: Adds deletion protection support to policy stores. Deletion protection is disabled by default, can be enabled via the CreatePolicyStore or UpdatePolicyStore APIs, and is visible in GetPolicyStore.

`v1.7.5`

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2/service/accessanalyzer: v1.34.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/account: v1.21.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/acm: v1.30.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/acmpca: v1.37.6
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/amp: v1.30.2
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/amplify: v1.27.3
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/amplifybackend: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/amplifyuibuilder: v1.23.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/apigateway: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/apigatewaymanagementapi: v1.23.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/apigatewayv2: v1.24.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/appconfig: v1.35.3
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/appconfigdata: v1.18.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/appfabric: v1.11.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/appflow: v1.45.6
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/appintegrations: v1.30.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/applicationautoscaling: v1.33.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/applicationcostprofiler: v1.21.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/applicationdiscoveryservice: v1.28.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/applicationinsights: v1.29.3
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/applicationsignals: v1.6.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/appmesh: v1.29.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/apprunner: v1.32.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/appstream: v1.41.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/appsync: v1.39.2
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/apptest: v1.4.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/arczonalshift: v1.14.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/artifact: v1.6.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/athena: v1.48.3
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/auditmanager: v1.37.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/autoscaling: v1.48.0
- Feature: Auto Scaling groups now support the ability to strictly balance instances across Availability Zones by configuring the AvailabilityZoneDistribution parameter. If balanced-only is configured for a group, launches will always be attempted in the under scaled Availability Zone even if it is unhealthy.
github.com/aws/aws-sdk-go-v2/service/autoscalingplans: v1.24.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/b2bi: v1.0.0-preview.51
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/backup: v1.39.6
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/backupgateway: v1.20.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/batch: v1.47.2
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/bcmdataexports: v1.7.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/bedrock: v1.22.2
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/bedrockagent: v1.27.0
- Feature: Add prompt support for chat template configuration and agent generative AI resource. Add support for configuring an optional guardrail in Prompt and Knowledge Base nodes in Prompt Flows. Add API to validate flow definition
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime: v1.23.3
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/bedrockruntime: v1.20.0
- Feature: Add Prompt management support to Bedrock runtime APIs: Converse, ConverseStream, InvokeModel, InvokeModelWithStreamingResponse
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/billingconductor: v1.20.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/braket: v1.31.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/budgets: v1.28.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/chatbot: v1.8.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/chime: v1.34.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/chimesdkidentity: v1.22.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/chimesdkmediapipelines: v1.20.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/chimesdkmeetings: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/chimesdkmessaging: v1.26.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/chimesdkvoice: v1.19.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/cleanrooms: v1.20.0
- Feature: This release introduces support for Custom Models in AWS Clean Rooms ML.
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/cleanroomsml: v1.10.0
- Feature: This release introduces support for Custom Models in AWS Clean Rooms ML.
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/cloud9: v1.28.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/cloudcontrol: v1.22.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/clouddirectory: v1.24.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/cloudfrontkeyvaluestore: v1.8.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/cloudhsm: v1.24.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/cloudhsmv2: v1.27.6
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/cloudsearchdomain: v1.23.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/cloudtrail: v1.44.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/cloudtraildata: v1.11.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/cloudwatchevents: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs: v1.43.2
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/codeartifact: v1.33.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/codebuild: v1.48.1
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/codecatalyst: v1.17.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/codecommit: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/codeconnections: v1.5.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/codedeploy: v1.29.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/codeguruprofiler: v1.24.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/codegurureviewer: v1.29.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/codegurusecurity: v1.12.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/codepipeline: v1.36.3
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/codestarconnections: v1.29.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/codestarnotifications: v1.26.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/cognitoidentity: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/cognitoidentityprovider: v1.46.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/cognitosync: v1.23.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/comprehend: v1.35.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/comprehendmedical: v1.26.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/computeoptimizer: v1.39.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/configservice: v1.50.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/connect: v1.115.2
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/connectcampaigns: v1.15.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/connectcases: v1.21.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/connectcontactlens: v1.26.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/connectparticipant: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/controlcatalog: v1.5.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/controltower: v1.18.6
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/costandusagereportservice: v1.28.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/costexplorer: v1.43.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/costoptimizationhub: v1.10.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/customerprofiles: v1.42.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/databasemigrationservice: v1.44.3
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/databrew: v1.33.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/dataexchange: v1.33.3
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/datapipeline: v1.25.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/datasync: v1.43.2
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/datazone: v1.23.3
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/dax: v1.23.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/deadline: v1.6.4
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/detective: v1.31.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/devicefarm: v1.28.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/devopsguru: v1.34.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/directconnect: v1.29.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/directoryservice: v1.30.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/directoryservicedata: v1.2.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/dlm: v1.28.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/docdbelastic: v1.14.2
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/drs: v1.30.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/dynamodb: v1.36.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/dynamodbstreams: v1.24.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/ebs: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/ec2instanceconnect: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/ecr: v1.36.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/ecrpublic: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/ecs: v1.49.2
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/efs: v1.33.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/eks: v1.51.3
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/eksauth: v1.7.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/elasticinference: v1.23.6
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/elasticsearchservice: v1.32.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/elastictranscoder: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/emr: v1.46.3
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/emrcontainers: v1.33.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/emrserverless: v1.26.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/entityresolution: v1.15.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/eventbridge: v1.35.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/evidently: v1.23.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/finspace: v1.28.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/finspacedata: v1.28.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/firehose: v1.34.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/fis: v1.30.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/fms: v1.38.3
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/forecast: v1.36.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/forecastquery: v1.24.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/frauddetector: v1.35.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/freetier: v1.7.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/fsx: v1.49.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/gamelift: v1.36.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/geomaps: v1.0.2
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/geoplaces: v1.0.2
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/georoutes: v1.0.2
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/glacier: v1.26.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/globalaccelerator: v1.29.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/glue: v1.101.2
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/grafana: v1.26.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/greengrass: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/greengrassv2: v1.35.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/groundstation: v1.31.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/guardduty: v1.51.1
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/health: v1.28.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/healthlake: v1.28.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/identitystore: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/imagebuilder: v1.38.3
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/inspector: v1.25.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/inspector2: v1.32.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/inspectorscan: v1.7.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/internetmonitor: v1.19.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/iot: v1.59.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/iot1clickdevicesservice: v1.23.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/iot1clickprojects: v1.23.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/iotanalytics: v1.26.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/iotdataplane: v1.26.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/iotdeviceadvisor: v1.31.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/iotevents: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/ioteventsdata: v1.24.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/iotfleethub: v1.24.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/iotfleetwise: v1.21.2
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/iotjobsdataplane: v1.23.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/iotsecuretunneling: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/iotsitewise: v1.43.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/iotthingsgraph: v1.25.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/iottwinmaker: v1.24.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/iotwireless: v1.44.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/ivschat: v1.16.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/kafka: v1.38.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/kafkaconnect: v1.21.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/kendra: v1.54.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/kendraranking: v1.11.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/keyspaces: v1.15.2
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/kinesis: v1.32.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/kinesisanalytics: v1.25.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/kinesisanalyticsv2: v1.31.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/kinesisvideo: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/kinesisvideoarchivedmedia: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/kinesisvideomedia: v1.22.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/kinesisvideosignaling: v1.23.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/kinesisvideowebrtcstorage: v1.14.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/kms: v1.37.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/lakeformation: v1.38.1
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/lambda: v1.64.3
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/launchwizard: v1.8.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/lexmodelbuildingservice: v1.28.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/lexmodelsv2: v1.49.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/lexruntimeservice: v1.24.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/lexruntimev2: v1.29.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/licensemanager: v1.29.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/licensemanagerlinuxsubscriptions: v1.14.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/licensemanagerusersubscriptions: v1.13.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/lightsail: v1.42.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/location: v1.42.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/lookoutequipment: v1.30.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/lookoutmetrics: v1.31.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/lookoutvision: v1.27.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/m2: v1.18.3
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/machinelearning: v1.28.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/macie2: v1.43.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/mailmanager: v1.6.3
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/managedblockchain: v1.26.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/managedblockchainquery: v1.16.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/marketplaceagreement: v1.6.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/marketplacecatalog: v1.30.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/marketplacecommerceanalytics: v1.24.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/marketplacedeployment: v1.6.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/marketplaceentitlementservice: v1.25.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/marketplacemetering: v1.25.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/marketplacereporting: v1.1.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/mediaconnect: v1.35.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/mediaconvert: v1.61.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/medialive: v1.62.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/mediapackage: v1.34.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/mediapackagev2: v1.19.2
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/mediapackagevod: v1.34.6
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
github.com/aws/aws-sdk-go-v2/service/mediastore: v1.24.5
- Bug Fix: Adds case-insensitive handling of error message fields in service responses
`github.com/aws/aws-sdk-go-v2/serv

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/Chicago)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-04-08T05:53:19Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

9 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.23.0` -> `1.24`
`github.com/aws/aws-sdk-go-v2`	`v1.27.2` -> `v1.41.5`
`github.com/aws/aws-sdk-go-v2/internal/configsources`	`v1.3.9` -> `v1.4.21`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.6.9` -> `v2.7.21`
`github.com/aws/aws-sdk-go-v2/internal/v4a`	`v1.3.9` -> `v1.4.22`
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`	`v1.11.2` -> `v1.13.7`
`github.com/aws/aws-sdk-go-v2/service/internal/checksum`	`v1.3.11` -> `v1.9.13`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.11.11` -> `v1.13.21`
`github.com/aws/aws-sdk-go-v2/service/internal/s3shared`	`v1.17.9` -> `v1.19.21`
`github.com/aws/smithy-go`	`v1.20.2` -> `v1.24.2`

snyk-io · 2026-04-08T05:53:33Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

codecov · 2026-04-08T06:00:30Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 25.37%. Comparing base (a2521eb) to head (f809082).
⚠️ Report is 131 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #199      +/-   ##
==========================================
- Coverage   32.61%   25.37%   -7.24%     
==========================================
  Files          80       79       -1     
  Lines       10855    11088     +233     
==========================================
- Hits         3540     2814     -726     
- Misses       7027     8008     +981     
+ Partials      288      266      -22

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

renovate Bot added dependencies ignore-stale security labels Apr 8, 2026

renovate Bot enabled auto-merge (squash) April 8, 2026 05:53

renovate Bot requested a review from a team as a code owner April 8, 2026 05:53

renovate Bot requested a review from pacificcode April 8, 2026 05:53

renovate Bot added security dependencies ignore-stale labels Apr 8, 2026

renovate-approve Bot approved these changes Apr 8, 2026

View reviewed changes

github-actions Bot assigned renovate[bot] Apr 8, 2026

renovate Bot changed the title ~~security(gomod): 🛡️ minor require to v1.97.3~~ security(gomod): 🛡️ minor 🛡️ vulnerability [medium] Apr 8, 2026

renovate Bot force-pushed the renovate/vulnerability-medium branch 2 times, most recently from 3a31f4a to 0c23a80 Compare April 17, 2026 11:04

renovate Bot force-pushed the renovate/vulnerability-medium branch from 0c23a80 to bbc476b Compare June 12, 2026 20:07

renovate Bot changed the title ~~security(gomod): 🛡️ minor 🛡️ vulnerability [medium]~~ security(gomod): 🛡️ minor 🛡️ vulnerability [medium] to v1.7.8 Jun 12, 2026

security(gomod): 🛡️ minor 🛡️ vulnerability [medium]

f809082

renovate Bot force-pushed the renovate/vulnerability-medium branch from bbc476b to f809082 Compare June 12, 2026 21:47

renovate Bot changed the title ~~security(gomod): 🛡️ minor 🛡️ vulnerability [medium] to v1.7.8~~ security(gomod): 🛡️ minor 🛡️ vulnerability [medium] Jun 12, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

security(gomod): 🛡️ minor 🛡️ vulnerability [medium]#199

security(gomod): 🛡️ minor 🛡️ vulnerability [medium]#199
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/vulnerability-medium

renovate Bot commented Apr 8, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Apr 8, 2026 •

edited

Loading

Uh oh!

snyk-io Bot commented Apr 8, 2026 •

edited

Loading

Uh oh!

codecov Bot commented Apr 8, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Apr 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

Details

Summary and Impact

Patches

Workarounds

References

Severity

References

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

Details

Summary and Impact

Patches

Workarounds

References

Severity

References

Release Notes

v1.7.7

General Highlights

Module Highlights

v1.7.5

General Highlights

Module Highlights

Configuration

Uh oh!

renovate Bot commented Apr 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

snyk-io Bot commented Apr 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

codecov Bot commented Apr 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Apr 8, 2026 •

edited

Loading

`v1.7.7`

`v1.7.5`

renovate Bot commented Apr 8, 2026 •

edited

Loading

snyk-io Bot commented Apr 8, 2026 •

edited

Loading

codecov Bot commented Apr 8, 2026 •

edited

Loading