org.apache.mina:mina-core vulnerabilities (Maven)

8 vulnerabilities.

• org.apache.mina:mina-core Maven Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232 CVE-2026-47065 Fix available 9.8 CriticalJune 3, 2026
• org.apache.mina:mina-core Maven Apache MINA: CWE-502 Deserialization of Untrusted Data (take 2) CVE-2026-42778 Public exploitFix available 9.8 CriticalMay 1, 2026
• org.apache.mina:mina-core Maven Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (take 2) CVE-2026-42779 Public exploitFix available 9.8 CriticalMay 1, 2026
• org.apache.mina:mina-core Maven Apache MINA: CWE-502 Deserialization of Untrusted Data CVE-2026-41409 Fix available 9.8 CriticalApril 27, 2026
• org.apache.mina:mina-core Maven Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE CVE-2026-41635 Fix available 9.8 CriticalApril 27, 2026
• org.apache.mina:mina-core Maven Apache MINA: MINA applications using unbounded deserialization may allow RCE CVE-2024-52046 Fix available EPSS 24.6% 10.0 CriticalDecember 25, 2024
• org.apache.mina:mina-core Maven Apache MINA HTTP listener DOS CVE-2021-41973 Fix available 6.5 MediumNovember 1, 2021
• org.apache.mina:mina-core Maven Apache MINA SSLFilter security Issue CVE-2019-0231 Fix available 7.5 HighOctober 1, 2019