Threats affecting pkg:github/awslabs/aws-c-event-stream

CVE-2026-5190 is a high-severity vulnerability in the aws-c-event-stream library before version 0.6.0. It involves an out-of-bounds write in the streaming decoder component that could allow a malicious server to cause memory corruption and potentially execute arbitrary code on a client processing crafted event-stream messages. The issue is fixed in version 0.6.0 and later.