AWS aws-sdk-rust

• CVE-2026-15957 High 7.5 Uncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows unauthenticated remote denial of service via recursive shapes 0.4%