https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 06:36:03 +0000 https://vulnerability.circl.lu/vuln/cve-2026-41409 <p><strong>Affected:</strong> Apache Software Foundation Apache MINA</p> <p>The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete. The classname allowlist of classes allowed to be deserialized was applied too late after a static initializer in a class to be read might already have been executed.</p> <p>Affected versions are Apache MINA 2.0.0 &lt;= 2.0.27, 2.1.0 &lt;= 2.1.10, and 2.2.0 &lt;= 2.2.5.</p> <p>The problem is resolved in Apache MINA 2.0.28, 2.1.11, and 2.2.6 by applying the classname allowlist earlier.</p> <p>Affected are applications using Apache MINA that call IoBuffer.getObject().</p> <p>Applications using Apache MINA are advised to upgrade</p> <p><strong>Affected:</strong> Apache Software Foundation Apache MINA</p> <p>The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete. The classname allowlist of classes allowed to be deserialized was applied too late after a static initializer in a class to be read might already have been executed.</p> <p>Affected versions are Apache MINA 2.0.0 &lt;= 2.0.27, 2.1.0 &lt;= 2.1.10, and 2.2.0 &lt;= 2.2.5.</p> <p>The problem is resolved in Apache MINA 2.0.28, 2.1.11, and 2.2.6 by applying the classname allowlist earlier.</p> <p>Affected are applications using Apache MINA that call IoBuffer.getObject().</p> <p>Applications using Apache MINA are advised to upgrade</p> https://vulnerability.circl.lu/vuln/cve-2026-41409