Threats Tagged 'ghsa-3c8x-fp36-75xv'

CVE-2026-47321 is a high-severity vulnerability in Apache MINA's CompressionFilter class where inflated data size is not properly controlled. This can lead to excessive memory consumption due to data amplification from highly compressed inputs. The vulnerability affects Apache MINA versions >=2.0.0 <2.0.29, >=2.1.0 <2.1.13, and >=2.2.0 <2.2.8. The fix introduces parameters to limit maximum decompressed size and decompression ratio, preventing memory exhaustion. Users are advised to upgrade and configure CompressionFilter accordingly.