Amazon Ion Amazon Ion Java

• CVE-2026-75936 High 7.5 Memory-amplification denial of service via GZIP decompression bomb in Amazon ion-java 0.6%
• CVE-2026-75935 High 7.5 Memory-amplification denial of service via declared-length preallocation in Amazon ion-java 0.6%