We take all security reports seriously. When we receive such reports, we will investigate and subsequently address any potential vulnerabilities as quickly as possible. If you discover a potential security issue in this project, please notify AWS/Amazon Security via our vulnerability reporting page or directly via email to AWS Security. Please do not create a public GitHub issue in this project.
Security: amazon-ion/ion-java
Security
SECURITY.md
-
Memory-amplification denial of service via GZIP decompression bomb in Amazon ion-javaGHSA-wj53-jv76-65mc published
Aug 18, 2026 by tgreggHigh -
Memory-amplification denial of service via declared-length preallocation in Amazon ion-javaGHSA-822f-6gg9-whr5 published
Aug 18, 2026 by tgreggHigh -
Ion Java StackOverflow vulnerabilityGHSA-264p-99wq-f4j6 published
Jan 3, 2024 by popemattHigh
Learn more about advisories related to amazon-ion/ion-java in the GitHub Advisory Database