ion vulnerabilities and fixes

Recent CVEs affecting ion, with upgrade or downgrade steps. 2 tracked.

ion has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-01-03. Highest priority: CVE-2024-21634 (score 51/100).

• CVE-2024-21634 HIGH 7.5 UPGRADE Amazon Ion is a Java implementation of the Ion data notation
• CVE-2023-30857 LOW 3.7 UPGRADE @aedart/support is the support package for Ion, a monorepo for JavaScript/TypeScript packages

FAQ

How do I fix ion vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ion being exploited right now?

None of the tracked ion CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ion CVE should I patch first?

CVE-2024-21634 currently ranks highest (51/100): Amazon Ion is a Java implementation of the Ion data notation.

← Back to latest CVEs