While fuzzing the Kubernetes AWS KMS provider, researchers at Syntetisk found a denial-of-service issue in aws-encryption-provider where an empty ciphertext field could trigger an unrecovered Go panic and crash the plugin process.

The writeup includes root-cause analysis, crash path details, reproducer examples, impact discussion, and disclosure timeline

Recently disclosed AWS encryption bug

Came across an article, product like phpBB still has some potential flaws.