CVE-2026-84851 Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stack and crashes the application using the library, resulting in a denial of service...

CVE-2026-84851

CVE-2026-84851 is an uncontrolled recursion vulnerability in the Ion reader component of Amazon Ion-C , affecting versions before 1.1.6 . A remote, unauthenticated attacker can craft malicious Ion data that exhausts the native call stack, causing a denial of service in any application using the l...

CVE-2026-84851 Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stack and crashes the application using the library, resulting in a denial of service...

CVE-2026-84851 Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stack and crashes the application using the library, resulting in a denial of service...

EUVD-2026-70281

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stack and crashes the application using the library, resulting in a denial of service...

Malicious code in amazon-sync (npm)

--- Credit: OpenSSF source...

Malicious code in amazon-test (npm)

Source: ossf-package-analysis 7e065ee96bedcccbc1d717b33f9111467a598d6dd2b02fe1fdc4447ffee42a2f The OpenSSF Package Analysis project identified 'amazon-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavior...

Malicious code in amazon-q-developer-streaming-client (npm)

Source: amazon-inspector 2612d348229614bb857a8f2c30c1ad2d66954d7a05073f15319f8aca2fb1a86d The package amazon-q-developer-streaming-client was found to contain malicious code. Source: ossf-package-analysis bedb03611546444363288fafa5c9320d572a8fc1bcbfd52a1886076523c182d7 The OpenSSF Package Analysi...

Malicious code in amazon-tools (npm)

--- Credit: OpenSSF source...

Malicious code in amazon-user (npm)

--- Credit: OpenSSF source...

Malicious code in amazon-utils (npm)

--- Credit: OpenSSF source...

Malicious code in amazon-payment (npm)

Source: ossf-package-analysis 9680dbff3b7fad0b576b1efae75268c097baf1059dc1238e024598ff9cf77028 The OpenSSF Package Analysis project identified 'amazon-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in amazon-testpackage (npm)

Source: amazon-inspector c24a2f5487cf50f0172b998f136ba4a0b02416b3aebf52528c59eeeaaf6d64bd The package amazon-testpackage was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in amazon-seller-analytics-mcp-server (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

Malicious code in amazon-service (npm)

Source: ossf-package-analysis a2ade59f3434fffed78a5a2b75e5e864edb9894b80c3e7e5d8560e48d35f9b8d The OpenSSF Package Analysis project identified 'amazon-service' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in amazon-sdk (npm)

Source: ossf-package-analysis 4127486bd0cb05750c82045767db0554a5756fc8dad2794d13ce5284ebf4bf4c The OpenSSF Package Analysis project identified 'amazon-sdk' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in amazon-tests (npm)

--- Credit: OpenSSF source...

Malicious code in amazon-q-vscode (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

Malicious code in amazon-vendor-analytics-mcp-server (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

Malicious code in amazon-titan-inpainting-pipeline (npm)

The package amazon-titan-inpainting-pipeline was found to contain malicious code. --- Credit: OpenSSF source...