Skip to content
OpenAdvisories

Product · amazon

ion-java

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-85786

    Incomplete fix for CVE-2026-75936 memory-amplification denial of service in Amazon ion-java

    Improper handling of highly compressed data in Amazon ion-java before 1.12.1 might allow remote attackers to cause a denial of service via a crafted compressed Ion document that expands to an arbitrarily large size upon decompression due to insufficient cover…

    amazon ion-java