apache__mina-sshd_CVE-2023-35887_2-9-2

Apache MINA SSHD Apache MINA SSHD est une bibliothèque 100 % pure Java pour prendre en charge les protocoles SSH côté client et serveur. Elle ne vise pas à remplacer le client SSH ou le serveur SSH des systèmes d'exploitation Unix, mais plutôt à fournir un support pour les applications Java...

o1js-scan

o1js-scan Paquet communautaire : o1js-scan est référencé dans le répertoire officiel o1js Community Packages. Dernière version : 0.22.0 — un serveur MCP local permet à Claude Code, Cursor et autres assistants de codage IA d'exécuter le scanner pendant que vous écrivez une zkApp : pip install...

CVE-2026-42779

CVE-2026-42779 — Contournement du filtre de désérialisation Apache MINA menant à une exécution de code à distance CVSS 3.1 : 9.8 CRITIQUE AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE : CWE-502 Désérialisation de données non fiables Signaleur : Venkatraman Kumar, Securin Avis : Liste de diffusion Apach...

CVE-2026-42778-POC

CVE-2026-42778 Vue d'ensemble Correctif incomplet dans la méthode AbstractIoBuffer.getObject d'Apache MINA. La validation de la liste blanche des noms de classes, qui restreint les classes pouvant être désérialisées, est appliquée trop tard, après que les initialiseurs statiques des classes en...

apache-mina-deserialization-security-assessment

CVE-2024-52046 - Apache MINA RCE par désérialisation Rapport de cybersécurité de style consultant Rapport d'évaluation de vulnérabilité professionnel pour le risque de désérialisation d'Apache MINA, incluant résumé exécutif, impact technique, correction et stratégie d'atténuation. 📍 Aperçu du...

CLEANSTART-2026-CR72646 ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process incoming serialized data but lacks the necessary security checks and defenses

Security vulnerability affects the apache-hive package. The ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process incoming serialized data but lacks the necessary security checks and defenses...

CLEANSTART-2026-SQ46621 Apache MINA's AbstractIoBuffer

Security vulnerability affects the apache-hive package. Apache MINA's AbstractIoBuffer...

CLEANSTART-2026-SB27821 fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer

Security vulnerability affects the apache-hive package. The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer...

CLEANSTART-2026-NF19276 Improper certificate validation in Apache MINA SSHD (server-side)

Security vulnerability affects the wildfly package. Improper certificate validation in Apache MINA SSHD server-side...

Path Traversal

Apache MINA SSHD is vulnerable to path traversal. The vulnerability is due to insufficient path validation on Windows, where the sshd-git component fails to properly restrict file system paths and an authenticated remote user can craft directory traversal sequences to access git repositories...

CLEANSTART-2026-EF36950 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA

Security vulnerability affects the sonarqube package. Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA...

CLEANSTART-2026-HK92541 Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795

Security vulnerability affects the sonarqube package. Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795...

CVE-2026-40473

camel-mina MinaConverter.toObjectInput Reproducer de désérialisation non sécurisée CVE-2026-40473 Ce projet démontre une vulnérabilité de désérialisation Java dans le composant camel-mina d'Apache Camel, suivie sous le numéro CVE-2026-40473. Le convertisseur de type...

Security Bulletin: IBM webMethods Integration Server uses third-party Apache MINA SSHD and Apache MINA Core libraries that are affected CVE-2026-56624

Summary IBM webMethods Integration Server uses third-party Apache MINA SSHD and Apache MINA Core libraries that are affected by CVE-2026-56624. Vulnerability Details CVEID:CVE-2026-56624 DESCRIPTION: Improper certificate validation in Apache MINA SSHD server-side. Apache MINA SSHD is a Java libra...

CLEANSTART-2026-GO33321 Apache MINA's AbstractIoBuffer

Security vulnerability affects the apache-nifi package. Apache MINA's AbstractIoBuffer...

CVE-2026-94029

A flaw was found in Apache MINA SSHD. When processing SSH File Transfer Protocol SFTP check-file extensions, the server accumulates file hash verification responses entirely in memory without enforcing a size limit. An authenticated remote attacker can exploit this vulnerability by requesting fil...

CVE-2026-94002

A flaw was found in the sshd-sftp component of Apache MINA SSHD. This vulnerability allows a malicious server to cause a Denial of Service DoS on the client by exhausting system memory. The SFTP SSH File Transfer Protocol client fails to verify whether incoming replies correspond to previously se...

CVE-2026-93994

A flaw was found in Apache MINA SSHD. When the server is configured to require multiple Secure Shell SSH public keys for authentication, it fails to verify that the submitted keys are distinct. A remote user can exploit this flaw by presenting the same public key twice to satisfy multi-key...

SUSE CVE-2026-77185

Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain presumed rare way to implement an SSH server. Apache MINA SSHD is a Java library for client- and server-side SSH. In the server part of the library, a mechanism to perform...

SUSE CVE-2026-93994

Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two different public keys, not just one. In OpenSSH, this would be done by setting in sshdconfig AuthenticationMethods "publickey,publickey"...