smithy-rs Recursion Bug Causes DoS – Update Your AWS SDK for Rust Now

AWS smithy-rs has a nasty recursion vulnerability (CVE-2026-15957) in its JSON, CBOR, and XML deserializers that lets attackers crash your service with deeply nested payloads. If you're running aws-sdk-rust versions before release-2026-06-0, you need to patch immediately – this is a remote DoS that requires zero authentication. The fix is straightforward: upgrade your crates and you're golden.