RHLW-2026-6E6E3B76EDF3A10B Lightwell Security Advisory: mina-core 2.2.5.rhlw-00009

Red Hat Lightwell has released org.apache.mina:mina-core 2.2.5.rhlw-00009 with a backported security fix. CVE-2026-47065: Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232 This patched artifact is a drop-in replacement for org.apache.mina:mina-core 2.2.5 fr...

Security Bulletin: A Security Vulnerability in Apache MINA Core affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-94301)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed this security vulnerability Vulnerability Details CVEID:CVE-2026-94301 DESCRIPTION: The fix for CVE-2026-47065/ZDRES-232 "resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy",...

RHLW-2026-16C4875677D98603 Lightwell Security Advisory: mina-core 2.2.5.rhlw-00002

Red Hat Lightwell has released org.apache.mina:mina-core 2.2.5.rhlw-00002 with a backported security fix. CVE-2026-41635: Apache MINA: AbstractIoBuffer.resolveClass null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE This patched artifact is a drop-in replacement for...

Security Bulletin: IBM webMethods Integration Server uses third-party Apache MINA SSHD and Apache MINA Core libraries that are affected CVE-2026-56624

Summary IBM webMethods Integration Server uses third-party Apache MINA SSHD and Apache MINA Core libraries that are affected by CVE-2026-56624. Vulnerability Details CVEID:CVE-2026-56624 DESCRIPTION: Improper certificate validation in Apache MINA SSHD server-side. Apache MINA SSHD is a Java libra...

asia.stampy:stampy-all (1.0-release), asia.stampy:stampy-examples (1.0-release) +2014 more potentially affected by CVE-2026-94301 via org.apache.mina:mina-core (>=2.0.0, <=2.0.30)

org.apache.mina:mina-core MAVEN version =2.0.0, =37.v0d3157c4aef8, =1.0.1.release, =1.1.8.release, =1.1.5.release, =1.0.0.release, =1.0.0.release, =1.0.0.release, =1.0.2.release, =2.0.0, =1.0.7, =1.1.6, =1.6.8 - co.actioniq:scala-ssh-shell2.10 0.0.1-9045f42e1634ad6f74edf826b9c7c61d1a495a38 and mo...

be.personify.iam:personify-provisioning (>=1.3.1.release, <=1.5.2.release), be.personify.iam:personify-scim-server (>=1.2.6.release, <=2.1.2.release) +493 more potentially affected by CVE-2026-94301 via org.apache.mina:mina-core (>=2.1.0, <=2.1.14)

org.apache.mina:mina-core MAVEN version =2.1.0, =1.3.1.release, =1.2.6.release, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =2.0.0, =2.0.0, =1.0.0, =3.3.0, =2.5.2.release,...

au.com.versent.jenkins.plugins:ignore-committer-strategy (>=37.v0d3157c4a_ef8, <=63.v7e87d06b_a_30c), com.github.zhkl0228:rp-server (>=1.0.16, <=2.1.0) +112 more potentially affected by CVE-2026-47065 +1 more via org.apache.mina:mina-core (>=2.0.27, <=2.0.30)

org.apache.mina:mina-core MAVEN version =2.0.27, =37.v0d3157c4aef8, =1.0.16, =1.2.7, =2.14.0, =2.14.0, =2.15.0, =2.14.0, =2.13.0, =2.13.0, =2.5.0, =8.0, =8.0, =2.14.0-138.v6341ee58e1df, =2.14.0-138.v6341ee58e1df, =2.14.0-143.v2b362fc39576 and more Source cves: CVE-2026-47065, CVE-2026-94301 Sourc...

asia.stampy:stampy-all (1.0-release), asia.stampy:stampy-examples (1.0-release) +2282 more potentially affected by CVE-2026-47321 via org.apache.mina:mina-core (>=2.0.0-m1, <=2.0.28)

org.apache.mina:mina-core MAVEN version =2.0.0-m1, =37.v0d3157c4aef8, =1.0.1.release, =1.1.8.release, =1.1.5.release, =2.7.4.0, =1.0.0.release, =1.0.0.release, =1.0.0.release, =1.0.2.release, =1.0.3.release - cn.javaboot:nacos-address 1.4.1 - cn.javaboot:nacos-console 1.4.1 -...

be.personify.iam:personify-provisioning (>=1.3.1.release, <=1.5.2.release), be.personify.iam:personify-scim-server (>=1.2.6.release, <=2.1.2.release) +493 more potentially affected by CVE-2026-47321 via org.apache.mina:mina-core (>=2.1.0, <=2.1.12)

org.apache.mina:mina-core MAVEN version =2.1.0, =1.3.1.release, =1.2.6.release, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =1.2.1.aghost-fix.20201109, =2.0.0, =2.0.0, =1.0.0, =3.3.0, =2.5.2.release,...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview org.apache.mina:mina-core is a network application framework which helps users develop high performance and high scalability network applications easily. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification in the...

ai.h2o:sparkling-water-core_2.11 (>=3.46.0.1-1-2.3, <=3.46.0.6-1-2.4), ai.h2o:sparkling-water-core_2.12 (>=3.46.0.1-1-3.0, <=3.46.0.6-1-3.5) +789 more potentially affected by CVE-2026-47321 via org.apache.mina:mina-core (>=2.2.0, <=2.2.7)

org.apache.mina:mina-core MAVEN version =2.2.0, =3.46.0.1-1-2.3, =3.46.0.1-1-3.0, =3.46.0.1-1-2.3, =3.46.0.1-1-3.0, =3.46.0.1-1-2.3, =3.46.0.1-1-3.0, =3.46.0.1-1-2.3, =3.46.0.1-1-3.0, =1.5.4.release, =0.0.2, =3.0.0, =1.0.9, =1.6.9, =1.2.5, =1.1.7, =1.2.8 and more Source cves: CVE-2026-47321 Sourc...

Security Bulletin: Insecure Deserialization Vulnerability in Mina Core Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-47065)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerability Vulnerability Details CVEID:CVE-2026-47065 DESCRIPTION: ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy Assessment: Fully addressed...

Security Bulletin: MongoDB Enterprised Advanced affected by: Deserialization of Untrusted Data (CVE-2026-42778, CVE-2026-42779)

Summary There are vulnerabilities in mina-core-2.2.4.jar used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-42778, CVE-2026-42779. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-42778 DESCRIPTION: The fix for CVE-2026-41409 was not applied to the 2.1.X...

Security Bulletin: MongoDB Enterprised Advanced affected by: Deserialization of Untrusted Data (CVE-2026-41409, CVE-2026-41635)

Summary There are vulnerabilities in mina-core-2.2.4.jar used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-41409, CVE-2026-41635. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-41409 DESCRIPTION: The fix for CVE-2024-52046 in Apache MINA...

ROOT-APP-MAVEN-CVE-2019-0231 CVE-2019-0231 in io.root.org.apache.mina:mina-core - Patched by Root

Root has patched CVE-2019-0231 in the io.root.org.apache.mina:mina-core package for Root:Maven. Multiple fixed versions available...

asia.stampy:stampy-all (1.0-release), asia.stampy:stampy-examples (1.0-release) +2282 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (>=2.0.0-m1, <=2.0.28)

org.apache.mina:mina-core MAVEN version =2.0.0-m1, =37.v0d3157c4aef8, =1.0.1.release, =1.1.8.release, =1.1.5.release, =2.7.4.0, =1.0.0.release, =1.0.0.release, =1.0.0.release, =1.0.2.release, =1.0.3.release - cn.javaboot:nacos-address 1.4.1 - cn.javaboot:nacos-console 1.4.1 -...

org.apache.mina:mina-example (1.0.7), org.apache.mina:mina-filter-codec-netty (1.0.7) +5 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.0.7)

org.apache.mina:mina-core MAVEN version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.0.7 - org.apache.mina:mina-filter-codec-netty 1.0.7 -...

org.apache.mina:mina-example (1.1.3), org.apache.mina:mina-filter-codec-netty (1.1.3) +5 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.1.3)

org.apache.mina:mina-core MAVEN version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.1.3 - org.apache.mina:mina-filter-codec-netty 1.1.3 -...

org.apache.archiva.redback.components:spring-apacheds (>=2.0, <=2.1), org.apache.directory.server:apacheds-core (1.5.1) +31 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.1.2)

org.apache.mina:mina-core MAVEN version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.archiva.redback.components:spring-apacheds =2.0, =0.9.7, =0.9.8 -...

org.apache.mina:mina-example (1.1.1), org.apache.mina:mina-filter-compression (1.1.1) +3 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.1.1)

org.apache.mina:mina-core MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.1.1 - org.apache.mina:mina-filter-compression 1.1.1 -...