Amazon ion-java Memory Denial of Service – Update Required
Amazon ion-java (Java library for Ion data format) has two critical memory-amplification DoS vulnerabilities: CVE-2026-75935 via declared-length preallocation and CVE-2026-75936 via compressed data expansion. Versions below 1.12.0 are affected and require immediate patching. If you're using ion-java in production, update now to protect against potential service disruptions.
source: [aws/security-bulletin]