{"action":"Upgrade Amazon.IonDotnet to 1.3.1 or later.","affected":[{"fixed":"1.3.1","introduced":"0"}],"component":"Amazon.IonDotnet","cve_ids":["CVE-2025-3857"],"ecosystem":"NuGet","epss":0.00622,"exploited":false,"fixed_versions":["1.3.1"],"ghsa_id":"GHSA-gm2p-wf5c-w3pj","id":"tcs_01M5N8PANSB60HJNKQC2WSJCGA","modified_at":"2025-10-14T22:34:29.614665Z","published_at":"2025-04-21T16:19:20Z","references":["https://osv.dev/vulnerability/GHSA-gm2p-wf5c-w3pj","https://github.com/amazon-ion/ion-dotnet/security/advisories/GHSA-gm2p-wf5c-w3pj","https://nvd.nist.gov/vuln/detail/CVE-2025-3857","https://github.com/amazon-ion/ion-dotnet/commit/34a4f5215eceac1bb7bf434c4f2310d64d1b703b","https://aws.amazon.com/security/security-bulletins/AWS-2025-009","https://github.com/amazon-ion/ion-dotnet","https://github.com/amazon-ion/ion-dotnet/releases/tag/v1.3.1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gm2p-wf5c-w3pj","url":"https://osv.dev/vulnerability/GHSA-gm2p-wf5c-w3pj"}],"summary":"Infinite loop condition in Amazon.IonDotnet"}