{"id":"CVE-2026-104020","published":"2026-10-01T21:17:18.650","lastModified":"2026-10-02T19:16:40.303","description":"Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a denial of service, via a crafted, deeply nested Ion value.\n\n\n\nTo remediate this issue, users should upgrade to version 0.15.0 or later.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-674"],"vendors":[],"products":[],"references":[{"url":"https://aws.amazon.com/security/security-bulletins/2026-122-aws/","tags":[]},{"url":"https://github.com/amazon-ion/ion-python/releases/tag/v0.15.0","tags":[]},{"url":"https://github.com/amazon-ion/ion-python/security/advisories/GHSA-93q6-f8hx-vv7f","tags":[]}],"exploitRefs":[{"url":"https://github.com/amazon-ion/ion-python/releases/tag/v0.15.0","tags":[]},{"url":"https://github.com/amazon-ion/ion-python/security/advisories/GHSA-93q6-f8hx-vv7f","tags":[]}],"hasPoc":true,"ai":{"summary":"The Amazon Ion Python library contains a flaw in its Ion reader that can lead to uncontrolled recursion when processing deeply nested Ion values, potentially causing application crashes and denial of service. This vulnerability affects applications using the library without requiring authentication or user interaction.","exploitability":"Exploitation is straightforward as it requires only sending a crafted, deeply nested Ion value to an application using the vulnerable library, with no authentication or user interaction needed.","blast_radius":"The vulnerability could impact any application that processes Ion data from untrusted sources, potentially causing widespread denial of service across systems relying on this library for data parsing.","remediation":"Upgrade to Amazon Ion Python version 0.15.0 or later to remediate the uncontrolled recursion issue.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["denial-of-service","ion","python"],"model":"garnet-coder","analyzedAt":"2026-10-12T09:05:38.585Z"}}