{"id":"GHSA-g59m-gf8j-gjf5","aliases":[],"status":"published","title":"AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value","description":"## **Summary**\nThis notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value.\n\nA defense-in-depth enhancement has been implemented in the AWS SDK for Rust. This enhancement validates that a region used to construct an endpoint URL is a valid host label. The change was released on November 6, 2025. This advisory is informational to help customers understand their responsibilities regarding configuration security.\n\n## **Impact**\nCustomer applications could be configured to improperly route AWS API calls to non-existent or non-AWS hosts. While the SDK was functioning safely within the requirements of the shared responsibility model, additional safeguards have been added to support secure customer implementations.\n\n**Impacted versions**: All versions prior to [November 6, 2025 release](https://github.com/awslabs/aws-sdk-rust/releases/tag/release-2025-11-06)\n\n## **Patches**\nOn November 6, 2025, an enhancement [1] was made to the AWS SDK for Rust release, which validates the formatting of a region, providing additional safeguards.\n\n## **Workarounds**\nNo workarounds are needed, but as always developers should ensure that their application is following security best practices:\n- Implement proper input validation in your application code\n- Update to the latest AWS SDK for Rust release on a regular basis\n- Follow AWS security best practices [2] for SDK configuration\n\n## **References**\nContact AWS Security via the vulnerability reporting page or email [aws-security@amazon.com](mailto:aws-security@amazon.com).\n\n## **Acknowledgement**\nAWS Security thanks Guy Arazi for bringing these customer security considerations to our attention through the coordinated disclosure process.\n\n\n[1] https://github.com/smithy-lang/smithy-rs/pull/4383\n[2] https://docs.aws.amazon.com/sdk-for-rust/latest/dg/security.html","severity":{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2026-01-08T21:46:19Z","modified":"2026-09-10T03:50:33Z","fixes":[{"ecosystem":"crates.io","package":"aws-sdk-accessanalyzer","fixed_in":["1.96.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-account","fixed_in":["1.92.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-acm","fixed_in":["1.92.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-acmpca","fixed_in":["1.94.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-aiops","fixed_in":["1.18.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-amp","fixed_in":["1.95.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-amplify","fixed_in":["1.98.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-amplifybackend","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-amplifyuibuilder","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-apigateway","fixed_in":["1.92.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-apigatewaymanagement","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-apigatewayv2","fixed_in":["1.91.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-appconfig","fixed_in":["1.94.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-appconfigdata","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-appfabric","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-appflow","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-appintegrations","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-applicationautoscaling","fixed_in":["1.95.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-applicationcostprofiler","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-applicationdiscovery","fixed_in":["1.91.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-applicationinsights","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-applicationsignals","fixed_in":["1.67.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-appmesh","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-apprunner","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-appstream","fixed_in":["1.95.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-appsync","fixed_in":["1.102.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-arcregionswitch","fixed_in":["1.9.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-arczonalshift","fixed_in":["1.93.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-artifact","fixed_in":["1.79.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-athena","fixed_in":["1.94.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-auditmanager","fixed_in":["1.93.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-autoscaling","fixed_in":["1.100.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-autoscalingplans","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-b2bi","fixed_in":["1.96.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-backup","fixed_in":["1.96.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-backupgateway","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-backupsearch","fixed_in":["1.38.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-batch","fixed_in":["1.100.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-bcmdashboards","fixed_in":["1.7.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-bcmdataexports","fixed_in":["1.86.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-bcmpricingcalculator","fixed_in":["1.44.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-bcmrecommendedactions","fixed_in":["1.7.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-bedrock","fixed_in":["1.120.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-bedrockagent","fixed_in":["1.119.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-bedrockagentcore","fixed_in":["1.17.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-bedrockagentcorecontrol","fixed_in":["1.21.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-bedrockagentruntime","fixed_in":["1.116.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-bedrockdataautomation","fixed_in":["1.42.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-bedrockdataautomationruntime","fixed_in":["1.40.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-bedrockruntime","fixed_in":["1.113.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-billing","fixed_in":["1.43.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-billingconductor","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-braket","fixed_in":["1.92.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-budgets","fixed_in":["1.96.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-chatbot","fixed_in":["1.79.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-chime","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-chimesdkidentity","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-chimesdkmediapipelines","fixed_in":["1.91.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-chimesdkmeetings","fixed_in":["1.91.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-chimesdkmessaging","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-chimesdkvoice","fixed_in":["1.93.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cleanrooms","fixed_in":["1.107.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cleanroomsml","fixed_in":["1.93.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cloud9","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cloudcontrol","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-clouddirectory","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cloudformation","fixed_in":["1.99.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cloudfront","fixed_in":["1.102.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cloudfrontkeyvaluestore","fixed_in":["1.88.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cloudhsm","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cloudhsmv2","fixed_in":["1.92.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cloudsearch","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cloudsearchdomain","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cloudtrail","fixed_in":["1.96.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cloudtraildata","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cloudwatch","fixed_in":["1.97.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cloudwatchevents","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cloudwatchlogs","fixed_in":["1.107.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-codeartifact","fixed_in":["1.92.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-codebuild","fixed_in":["1.113.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-codecatalyst","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-codecommit","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-codeconnections","fixed_in":["1.73.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-codedeploy","fixed_in":["1.91.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-codeguruprofiler","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-codegurureviewer","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-codegurusecurity","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-codepipeline","fixed_in":["1.99.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-codestarconnections","fixed_in":["1.91.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-codestarnotifications","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cognitoidentity","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cognitoidentityprovider","fixed_in":["1.103.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-cognitosync","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-comprehend","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-comprehendmedical","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-computeoptimizer","fixed_in":["1.93.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-config","fixed_in":["1.94.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-connect","fixed_in":["1.136.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-connectcampaigns","fixed_in":["1.91.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-connectcampaignsv2","fixed_in":["1.41.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-connectcases","fixed_in":["1.97.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-connectcontactlens","fixed_in":["1.91.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-connectparticipant","fixed_in":["1.93.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-controlcatalog","fixed_in":["1.74.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-controltower","fixed_in":["1.95.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-costandusagereport","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-costexplorer","fixed_in":["1.101.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-costoptimizationhub","fixed_in":["1.94.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-customerprofiles","fixed_in":["1.98.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-databasemigration","fixed_in":["1.98.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-databrew","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-dataexchange","fixed_in":["1.92.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-datapipeline","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-datasync","fixed_in":["1.97.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-datazone","fixed_in":["1.112.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-dax","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-deadline","fixed_in":["1.83.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-detective","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-devicefarm","fixed_in":["1.92.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-devopsguru","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-directconnect","fixed_in":["1.93.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-directory","fixed_in":["1.94.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-directoryservicedata","fixed_in":["1.46.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-dlm","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-docdb","fixed_in":["1.96.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-docdbelastic","fixed_in":["1.91.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-drs","fixed_in":["1.92.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-dsql","fixed_in":["1.44.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-dynamodb","fixed_in":["1.98.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-dynamodbstreams","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-ebs","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-ec2","fixed_in":["1.181.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-ec2instanceconnect","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-ecr","fixed_in":["1.98.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-ecrpublic","fixed_in":["1.92.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-ecs","fixed_in":["1.104.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-efs","fixed_in":["1.92.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-eks","fixed_in":["1.113.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-eksauth","fixed_in":["1.86.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-elasticache","fixed_in":["1.95.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-elasticbeanstalk","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-elasticloadbalancing","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-elasticloadbalancingv2","fixed_in":["1.99.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-elasticsearch","fixed_in":["1.92.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-elastictranscoder","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-emr","fixed_in":["1.96.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-emrcontainers","fixed_in":["1.95.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-emrserverless","fixed_in":["1.97.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-entityresolution","fixed_in":["1.98.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-eventbridge","fixed_in":["1.96.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-evidently","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-evs","fixed_in":["1.19.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-finspace","fixed_in":["1.93.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-finspacedata","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-firehose","fixed_in":["1.97.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-fis","fixed_in":["1.92.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-fms","fixed_in":["1.93.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-forecast","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-forecastquery","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-frauddetector","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-freetier","fixed_in":["1.87.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-fsx","fixed_in":["1.100.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-gamelift","fixed_in":["1.96.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-gameliftstreams","fixed_in":["1.31.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-geomaps","fixed_in":["1.44.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-geoplaces","fixed_in":["1.43.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-georoutes","fixed_in":["1.43.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-glacier","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-globalaccelerator","fixed_in":["1.91.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-glue","fixed_in":["1.128.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-grafana","fixed_in":["1.91.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-greengrass","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-greengrassv2","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-groundstation","fixed_in":["1.92.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-guardduty","fixed_in":["1.103.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-health","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-healthlake","fixed_in":["1.92.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-iam","fixed_in":["1.95.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-identitystore","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-imagebuilder","fixed_in":["1.96.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-inspector","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-inspector2","fixed_in":["1.99.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-inspectorscan","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-internetmonitor","fixed_in":["1.94.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-invoicing","fixed_in":["1.40.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-iot","fixed_in":["1.100.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-iotanalytics","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-iotdataplane","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-iotdeviceadvisor","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-iotevents","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-ioteventsdata","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-iotfleetwise","fixed_in":["1.96.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-iotjobsdataplane","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-iotmanagedintegrations","fixed_in":["1.31.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-iotsecuretunneling","fixed_in":["1.90.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-iotsitewise","fixed_in":["1.96.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-iotthingsgraph","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-iottwinmaker","fixed_in":["1.89.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-iotwireless","fixed_in":["1.95.0"],"sources":["ghsa"]},{"ecosystem":"crates.io","package":"aws-sdk-ivs","fixed_in":["1.95.0"],"sources":["ghsa"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-accessanalyzer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.96.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-account","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-acm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-acmpca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.94.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-aiops","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-amp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.95.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-amplify","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.98.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-amplifybackend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-amplifyuibuilder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-apigateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-apigatewaymanagement","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-apigatewayv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.91.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-appconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.94.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-appconfigdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-appfabric","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-appflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-appintegrations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-applicationautoscaling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.95.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-applicationcostprofiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-applicationdiscovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.91.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-applicationinsights","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-applicationsignals","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.67.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-appmesh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-apprunner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-appstream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.95.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-appsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.102.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-arcregionswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-arczonalshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.93.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-artifact","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.79.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-athena","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.94.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-auditmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.93.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-autoscaling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.100.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-autoscalingplans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-b2bi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.96.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-backup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.96.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-backupgateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-backupsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-batch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.100.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-bcmdashboards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-bcmdataexports","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.86.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-bcmpricingcalculator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.44.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-bcmrecommendedactions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-bedrock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.120.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-bedrockagent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.119.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-bedrockagentcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-bedrockagentcorecontrol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-bedrockagentruntime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.116.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-bedrockdataautomation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-bedrockdataautomationruntime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-bedrockruntime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.113.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-billing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-billingconductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-braket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-budgets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.96.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-chatbot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.79.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-chime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-chimesdkidentity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-chimesdkmediapipelines","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.91.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-chimesdkmeetings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.91.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-chimesdkmessaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-chimesdkvoice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.93.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cleanrooms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.107.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cleanroomsml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.93.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cloud9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cloudcontrol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-clouddirectory","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cloudformation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.99.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cloudfront","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.102.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cloudfrontkeyvaluestore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.88.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cloudhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cloudhsmv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cloudsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cloudsearchdomain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cloudtrail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.96.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cloudtraildata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cloudwatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.97.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cloudwatchevents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cloudwatchlogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.107.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-codeartifact","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-codebuild","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.113.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-codecatalyst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-codecommit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-codeconnections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.73.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-codedeploy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.91.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-codeguruprofiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-codegurureviewer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-codegurusecurity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-codepipeline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.99.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-codestarconnections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.91.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-codestarnotifications","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cognitoidentity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cognitoidentityprovider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.103.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-cognitosync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-comprehend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-comprehendmedical","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-computeoptimizer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.93.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.94.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-connect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.136.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-connectcampaigns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.91.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-connectcampaignsv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-connectcases","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.97.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-connectcontactlens","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.91.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-connectparticipant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.93.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-controlcatalog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.74.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-controltower","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.95.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-costandusagereport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-costexplorer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.101.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-costoptimizationhub","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.94.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-customerprofiles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.98.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-databasemigration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.98.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-databrew","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-dataexchange","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-datapipeline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-datasync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.97.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-datazone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.112.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-dax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-deadline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.83.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-detective","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-devicefarm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-devopsguru","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-directconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.93.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-directory","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.94.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-directoryservicedata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.46.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-dlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-docdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.96.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-docdbelastic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.91.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-drs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-dsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.44.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-dynamodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.98.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-dynamodbstreams","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-ebs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.181.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-ec2instanceconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-ecr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.98.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-ecrpublic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-ecs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.104.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-efs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-eks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.113.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-eksauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.86.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-elasticache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.95.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-elasticbeanstalk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-elasticloadbalancing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-elasticloadbalancingv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.99.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-elasticsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-elastictranscoder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-emr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.96.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-emrcontainers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.95.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-emrserverless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.97.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-entityresolution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.98.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-eventbridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.96.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-evidently","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-evs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-finspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.93.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-finspacedata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-firehose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.97.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-fis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-fms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.93.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-forecast","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-forecastquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-frauddetector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-freetier","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.87.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-fsx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.100.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-gamelift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.96.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-gameliftstreams","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-geomaps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.44.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-geoplaces","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-georoutes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-glacier","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-globalaccelerator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.91.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-glue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.128.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.91.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-greengrass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-greengrassv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-groundstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-guardduty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.103.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-health","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-healthlake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-iam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.95.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-identitystore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-imagebuilder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.96.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-inspector2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.99.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-inspectorscan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-internetmonitor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.94.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-invoicing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-iot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.100.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-iotanalytics","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-iotdataplane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-iotdeviceadvisor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-iotevents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-ioteventsdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-iotfleetwise","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.96.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-iotjobsdataplane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-iotmanagedintegrations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-iotsecuretunneling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-iotsitewise","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.96.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-iotthingsgraph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-iottwinmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.89.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-iotwireless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.95.0"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sdk-ivs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.95.0"}]}]}],"affected_more":612,"references":[{"url":"https://github.com/awslabs/aws-sdk-rust/security/advisories/GHSA-g59m-gf8j-gjf5","tags":["web"]},{"url":"https://github.com/smithy-lang/smithy-rs/pull/4383","tags":["web"]},{"url":"https://docs.aws.amazon.com/sdk-for-rust/latest/dg/security.html","tags":["web"]},{"url":"https://github.com/advisories/GHSA-g59m-gf8j-gjf5"},{"url":"https://github.com/awslabs/aws-sdk-rust","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-g59m-gf8j-gjf5","title":"AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value","description":"## **Summary**\nThis notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value.\n\nA defense-in-depth enhancement has been implemented in the AWS SDK for Rust. This enhancement validates that a region used to construct an endpoint URL is a valid host label. The change was released on November 6, 2025. This advisory is informational to help customers understand their responsibilities regarding configuration security.\n\n## **Impact**\nCustomer applications could be configured to improperly route AWS API calls to non-existent or non-AWS hosts. While the SDK was functioning safely within the requirements of the shared responsibility model, additional safeguards have been added to support secure customer implementations.\n\n**Impacted versions**: All versions prior to [November 6, 2025 release](https://github.com/awslabs/aws-sdk-rust/releases/tag/release-2025-11-06)\n\n## **Patches**\nOn November 6, 2025, an enhancement [1] was made to the AWS SDK for Rust release, which validates the formatting of a region, providing additional safeguards.\n\n## **Workarounds**\nNo workarounds are needed, but as always developers should ensure that their application is following security best practices:\n- Implement proper input validation in your application code\n- Update to the latest AWS SDK for Rust release on a regular basis\n- Follow AWS security best practices [2] for SDK configuration\n\n## **References**\nContact AWS Security via the vulnerability reporting page or email [aws-security@amazon.com](mailto:aws-security@amazon.com).\n\n## **Acknowledgement**\nAWS Security thanks Guy Arazi for bringing these customer security considerations to our attention through the coordinated disclosure process.\n\n\n[1] https://github.com/smithy-lang/smithy-rs/pull/4383\n[2] https://docs.aws.amazon.com/sdk-for-rust/latest/dg/security.html","status":"published","published":"2026-01-08T21:46:19Z","modified":"2026-01-08T21:46:32Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:39:16.156387Z"}],"osv":[{"id":"GHSA-g59m-gf8j-gjf5","title":"AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value","description":"## **Summary**\nThis notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value.\n\nA defense-in-depth enhancement has been implemented in the AWS SDK for Rust. This enhancement validates that a region used to construct an endpoint URL is a valid host label. The change was released on November 6, 2025. This advisory is informational to help customers understand their responsibilities regarding configuration security.\n\n## **Impact**\nCustomer applications could be configured to improperly route AWS API calls to non-existent or non-AWS hosts. While the SDK was functioning safely within the requirements of the shared responsibility model, additional safeguards have been added to support secure customer implementations.\n\n**Impacted versions**: All versions prior to [November 6, 2025 release](https://github.com/awslabs/aws-sdk-rust/releases/tag/release-2025-11-06)\n\n## **Patches**\nOn November 6, 2025, an enhancement [1] was made to the AWS SDK for Rust release, which validates the formatting of a region, providing additional safeguards.\n\n## **Workarounds**\nNo workarounds are needed, but as always developers should ensure that their application is following security best practices:\n- Implement proper input validation in your application code\n- Update to the latest AWS SDK for Rust release on a regular basis\n- Follow AWS security best practices [2] for SDK configuration\n\n## **References**\nContact AWS Security via the vulnerability reporting page or email [aws-security@amazon.com](mailto:aws-security@amazon.com).\n\n## **Acknowledgement**\nAWS Security thanks Guy Arazi for bringing these customer security considerations to our attention through the coordinated disclosure process.\n\n\n[1] https://github.com/smithy-lang/smithy-rs/pull/4383\n[2] https://docs.aws.amazon.com/sdk-for-rust/latest/dg/security.html","status":"published","published":"2026-01-08T21:46:19Z","modified":"2026-09-10T03:50:33.090259565Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:46:47.472172Z"}]}}