VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: vulnerability history, versions and safety

github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from Apr 2026 to Jul 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded M1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
2 in the last 12 months

Most recent disclosure 07 Jul 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream vulnerabilities

Vulert verdict on github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.24 i

Updated on 23 Oct 2026

Action needed: v1.7.24 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 84/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v1.7.24 — affected i
  • Vulnerabilities on record 2 over 1 year · 2 in the last year i
  • Latest disclosure 07 Jul 2026 i
  • Highest CVSS 5.9 i
  • With no published fix 0 i
  • Stars 3,668 i
  • OpenSSF scorecard 5/10 i
  • Last release this month i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.7.24 22 Oct 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.23 21 Oct 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.22 09 Oct 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.21 08 Oct 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.20 26 Aug 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.19 25 Aug 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.18 14 Aug 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.17 10 Aug 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.16 31 Jul 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.15 28 Jul 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.14 01 Jul 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.13 04 Jun 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.12 03 Jun 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.11 29 May 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.10 29 Apr 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.9 17 Apr 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.8 23 Mar 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.7 13 Mar 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.6 03 Mar 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.5 23 Feb 2026 M1 U1 Apache-2.0 Yes Details →
v1.7.4 02 Dec 2025 M1 U1 Apache-2.0 Yes Details →
v1.7.4-0.20251112192256-b01c60e67d00 12 Nov 2025 M1 U1 Apache-2.0 Yes Details →
v1.7.4-0.20251111191648-ab564375c32b 11 Nov 2025 M1 U1 Apache-2.0 Yes Details →
v1.7.4-0.20251107191320-a432037f9e94 07 Nov 2025 M1 U1 Apache-2.0 Yes Details →
v1.7.3 04 Nov 2025 M1 U1 Apache-2.0 Yes Details →
v1.7.3-0.20251024222853-6c0b0d762757 24 Oct 2025 M1 U1 Apache-2.0 Yes Details →
v1.7.3-0.20251017182140-1a7301b01cbf 17 Oct 2025 M1 U1 Apache-2.0 Yes Details →
v1.7.3-0.20251016214929-27ef133b934b 16 Oct 2025 M1 U1 Apache-2.0 Yes Details →
v1.7.2 16 Oct 2025 M1 U1 Apache-2.0 Yes Details →
v1.7.1 27 Aug 2025 M1 U1 Apache-2.0 Yes Details →
v1.7.1-0.20250808203357-fcdf6abd1552 08 Aug 2025 M1 U1 Apache-2.0 Yes Details →
v1.7.1-0.20250801211111-2e08461090cc 01 Aug 2025 M1 U1 Apache-2.0 Yes Details →
v1.7.0 28 Jul 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.12-0.20250722044637-17d8d8100fdf 22 Jul 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.12-0.20250628042920-5f2cf1b08b34 28 Jun 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11 17 Jun 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11-0.20250613194339-5c12a3b4209e 13 Jun 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11-0.20250604200711-6d549a5c9119 04 Jun 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11-0.20250530183222-c1ea19ff7c00 30 May 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11-0.20250528182835-f44412972b96 28 May 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11-0.20250527213349-223d488213a4 27 May 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11-0.20250519213940-c1c1cda2978d 19 May 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11-0.20250516184617-c4a07f7e9806 16 May 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11-0.20250515200551-62f883571b2f 15 May 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11-0.20250425030750-3aace4178c90 25 Apr 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11-0.20250422214832-f73caf3a291d 22 Apr 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11-0.20250327192108-90e777842b3f 27 Mar 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11-0.20250325211916-6fa167adb5d1 25 Mar 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11-0.20250314212251-a8a6a95eeb38 14 Mar 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11-0.20250311015552-7aec2edeb610 11 Mar 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11-0.20250306213353-6d032edf7239 06 Mar 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11-0.20250224223935-f0d143d1fb44 24 Feb 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.11-0.20250220005851-1552aab7c11a 20 Feb 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.10 18 Feb 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.10-0.20250217202237-8b7c7bf6d9a1 17 Feb 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.9 14 Feb 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.9-0.20250213214422-11e6ab9192f9 13 Feb 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.9-0.20250204201418-68c46490c321 04 Feb 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.9-0.20250131201333-85742451645e 31 Jan 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.8 24 Jan 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.8-0.20250124022538-ed8a3caa0df9 24 Jan 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.8-0.20250121225125-e5689c9ef90d 21 Jan 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.8-0.20250117193021-fa8a15e1e023 17 Jan 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.8-0.20250117151857-74b33baa9e81 17 Jan 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.8-0.20250116231351-7ea97e576564 16 Jan 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.8-0.20250114221506-663682244082 14 Jan 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.8-0.20250107213634-7a84d4af05f4 07 Jan 2025 M1 U1 Apache-2.0 Yes Details →
v1.6.8-0.20241218200246-885de40869f9 18 Dec 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.8-0.20241213211119-6688b184b252 13 Dec 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.8-0.20241206225238-b440cd3e30f2 06 Dec 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.8-0.20241205013729-ffbc1dff6cff 05 Dec 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.8-0.20241202040831-776903f3dd72 02 Dec 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.8-0.20241129215737-2835f7bb8d49 29 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.8-0.20241127193213-ba4965dd291e 27 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.8-0.20241119204746-249090ec218d 19 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7 18 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241115205451-50ba45ce162c 15 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241115021307-93e0f294f6c6 15 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241114192456-f0fcf5955d8b 14 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241113192751-27326538a1c0 13 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241112194550-10b8b144498e 12 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241108193211-303fe5ef849e 08 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241107194411-2f70834c690f 07 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241106192635-70eb57ac775f 06 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241101190857-061540b5a73e 01 Nov 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241031183458-33400b4384bd 31 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241028182613-6b53348f842f 28 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241025200448-e05890387eb6 25 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241024182844-866d44143504 24 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241021221715-3bab20015daf 21 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241016182520-ebfeafa763ea 16 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241016010908-04e7aca073a0 16 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241011184029-071b493afc54 11 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241010222248-28d943f7f66c 10 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241009182900-bcff11552060 09 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241009163119-5dc40573aa37 09 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241008182431-0cbb5aa17f90 08 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.7-0.20241007182958-b737dc9eb148 07 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.6 04 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.6-0.20241003222231-280579adfcd8 03 Oct 2024 M1 U1 Apache-2.0 Yes Details →
v1.6.6-0.20241003182639-cb83a1cde349 03 Oct 2024 M1 U1 — Yes Details →
v1.6.6-0.20241002183333-6191b25230d7 02 Oct 2024 M1 U1 — Yes Details →
v1.6.6-0.20240927185338-22efd7712b37 27 Sep 2024 M1 U1 — Yes Details →
v1.6.6-0.20240925210817-3a96a42cb947 25 Sep 2024 M1 U1 — Yes Details →
v1.6.6-0.20240925183349-d0a2d1af31ec 25 Sep 2024 M1 U1 — Yes Details →
v1.6.6-0.20240923183020-3f09c24fc9a9 23 Sep 2024 M1 U1 — Yes Details →
v1.6.5 20 Sep 2024 M1 U1 — Yes Details →
v1.6.5-0.20240919201156-06150d96305d 19 Sep 2024 M1 U1 — Yes Details →
v1.6.5-0.20240917182555-13c37844ecd5 17 Sep 2024 M1 U1 — Yes Details →
v1.6.5-0.20240913182458-171151bb0fd1 13 Sep 2024 M1 U1 — Yes Details →
v1.6.5-0.20240912182535-1b644bfdcae8 12 Sep 2024 M1 U1 — Yes Details →
v1.6.5-0.20240911183258-6490035abb27 11 Sep 2024 M1 U1 — Yes Details →
v1.6.5-0.20240910183552-09f04521acbb 10 Sep 2024 M1 U1 — Yes Details →
v1.6.5-0.20240909182729-786e8a6fb6d0 09 Sep 2024 M1 U1 — Yes Details →
v1.6.5-0.20240906182417-827d25db0048 06 Sep 2024 M1 U1 — Yes Details →
v1.6.5-0.20240904182624-f1d71c59a149 04 Sep 2024 M1 U1 — Yes Details →
v1.6.5-0.20240903182319-a2b751d1ba71 03 Sep 2024 M1 U1 — Yes Details →
v1.6.5-0.20240830195412-4ed838eab2a9 30 Aug 2024 M1 U1 — Yes Details →
v1.6.5-0.20240827182504-7e17fb58af87 27 Aug 2024 M1 U1 — Yes Details →
v1.6.5-0.20240824004726-84ca95e16adf 24 Aug 2024 M1 U1 — Yes Details →

The newest 120 of 415 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2026 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 2 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
Denial of Service Vulnerability in AWS SDK for Go v2 EventStream Decoder 5.9 medium 1.7.8 08 Apr 2026
Denial of Service Vulnerability in AWS SDK for Go v2 EventStream Decoder N/A unrated 1.7.8 07 Jul 2026

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream

Is github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream safe to use?

Vulert records 2 vulnerabilities for github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream in Go: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream's Vulert package health score?

Vulert scores github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream 84/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream affected?

Yes. v1.7.24, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

How many vulnerabilities does github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream have?

2 vulnerabilities are recorded for github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream in the Go ecosystem: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream vulnerabilities disclosed?

2 vulnerabilities were recorded for github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream in the last 12 months, and the oldest entry in this database dates to 08 Apr 2026. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.