Intel

AIKIDO-2025-10593

github.com/aws/aws-sdk-go is vulnerable to Use of Unmaintained Third Party Components

Use of Unmaintained Third Party Components Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Aug 29, 2025

50

Medium Risk

This Affects:

Are you affected? Scan for Free

TL;DR

The github.com/aws/aws-sdk-go package is no longer maintained, as indicated by AWS. Its last commit documents that github.com/aws/aws-sdk-go has served its purpose and will no longer receive updates.

Who does this affect?

You are affected if you are using this package.

Background info

github.com/aws/aws-sdk-go is vulnerable to Use of Unmaintained Third Party Components in all versions.

How to fix this

Remove any github.com/aws/aws-sdk-go package from your application. Please take a look at github.com/aws/aws-sdk-go-v2 instead.