Amazon Ion

Products

ProductCVEsExploitedLatest
Amazon Ion Java2–Aug 18, 2026
ion-java1–Jan 3, 2024

Exploited and recent CVEs

  • CVE-2026-75936 High 7.5 Memory-amplification denial of service via GZIP decompression bomb in Amazon ion-java 0.6%
  • CVE-2026-75935 High 7.5 Memory-amplification denial of service via declared-length preallocation in Amazon ion-java 0.6%
  • CVE-2024-21634 High 7.5 Ion Java StackOverflow vulnerability 0.8%