aws-smithy-http-server Vulnerable to Slowloris DoS Attack
aws-smithy-http-server versions 0.66.4 and earlier have a nasty vulnerability (CVE-2026-16756) that lets unauthenticated attackers launch Slowloris denial of service attacks. The issue? Unlimited resource allocation in the default serve() path means attackers can tie up your server without breaking a sweat. If you're running Smithy-RS for the AWS SDK for Rust or custom services, update immediately to patch this.