AWS aws-smithy-http-server

• CVE-2026-16756 High 7.5 Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service 0.8%