CVE-2026-104020High· 7.5▾ TwilightUncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a denial of service, via a crafted, deeply nested Ion value. …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 2.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a denial of service, via a crafted, deeply nested Ion value.
To remediate this issue, users should upgrade to version 0.15.0 or later.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-112380Critical· 9.9Missing authorization in the WhatsApp channel in Kiro Crew
CVE-2026-35559Medium· 6.5Out-of-bounds write in query processing components in Amazon Athena ODBC driver
CVE-2026-8178High· 8.1Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver
CVE-2026-35561High· 7.4Insufficient authentication security controls in browser-based authentication components in Amazon Athena ODBC driver
CVE-2026-35558High· 7.8Improper neutralization of special elements in authentication components in Amazon Athena ODBC driver
CVE-2026-35560High· 7.4Improper certificate validation in identity provider connection components in Amazon Athena ODBC driver