Amazon Ion Java (Amazon Ion) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-18. Vendor: Amazon Ion.

CVEs of Amazon Ion Java

• CVE-2026-75936 - CVSS 8.7 (high), 2026-08-18: Improper handling of highly compressed data in the GZIP auto-decompression handler in Amazon ion-java before 1.12.0 might allow remote actors to cause a…
• CVE-2026-75935 - CVSS 8.7 (high), 2026-08-18: Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a…