Amazon ion-java vulnerabilities (CVE)

CVE records published for Amazon ion-java, newest first. Follow to get an email when a new one appears.

1 results

7.5High

CVE-2026-85786 2 months ago

Incomplete fix for CVE-2026-75936 memory-amplification denial of service in Amazon ion-java

Amazon ion-java

Improper handling of highly compressed data in Amazon ion-java before 1.12.1 might allow remote attackers to cause a denial of service via a crafted compressed Ion document that expands to an arbitrarily large size upon decompression due to insufficient cover…