| CVE-2026-118636 |
**UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageDecoder in the MINA 3.0 codec module calls…
|
9.8
Critical
|
Oct 31, 2026 |
| CVE-2026-94301 |
The fix for CVE-2026-47065/ZDRES-232 ("resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via…
|
9.8
Critical
|
Sep 21, 2026 |
| CVE-2026-47321 |
The CompressionFilter class uses ZLib to deflate and inflate data sent and received
|
7.5
High
|
Sep 21, 2026 |
| CVE-2026-47065 |
ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy Assessment: Fully…
|
9.8
Critical
|
Jun 3, 2026 |
| CVE-2026-42778 |
The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches
|
9.8
Critical
|
May 1, 2026 |
| CVE-2026-42779 |
The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches
|
9.8
Critical
|
May 1, 2026 |
| CVE-2026-41409 |
The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete
|
9.8
Critical
|
Apr 27, 2026 |
| CVE-2026-41635 |
Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes or primitive types)…
|
9.8
Critical
|
Apr 27, 2026 |
| CVE-2024-52046 |
The ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process incoming serialized…
|
10.0
Critical
|
Dec 25, 2024 |
| CVE-2021-41973 |
In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely
|
Not rated
|
Nov 1, 2021 |
| CVE-2019-0231 |
Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the…
|
Not rated
|
Oct 1, 2019 |