From 55ac3d18a6e17692f8991ea9b88dee995a37809e Mon Sep 17 00:00:00 2001 From: Andrea Cosentino Date: Tue, 22 Sep 2026 11:34:14 +0200 Subject: [PATCH] [GHSA-3c8x-fp36-75xv] The CompressionFilter class uses ZLib to deflate and infl... Co-Authored-By: Claude Opus 5 Signed-off-by: Andrea Cosentino --- .../GHSA-3c8x-fp36-75xv.json | 66 ++++++++++++++++++- 1 file changed, 64 insertions(+), 2 deletions(-) diff --git a/advisories/unreviewed/2026/09/GHSA-3c8x-fp36-75xv/GHSA-3c8x-fp36-75xv.json b/advisories/unreviewed/2026/09/GHSA-3c8x-fp36-75xv/GHSA-3c8x-fp36-75xv.json index cd3b37622b1..a36a20aac90 100644 --- a/advisories/unreviewed/2026/09/GHSA-3c8x-fp36-75xv/GHSA-3c8x-fp36-75xv.json +++ b/advisories/unreviewed/2026/09/GHSA-3c8x-fp36-75xv/GHSA-3c8x-fp36-75xv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-3c8x-fp36-75xv", - "modified": "2026-09-21T21:31:50Z", + "modified": "2026-09-22T09:31:19Z", "published": "2026-09-21T09:31:08Z", "aliases": [ "CVE-2026-47321" @@ -13,7 +13,65 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.mina:mina-filter-compression" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.0.0" + }, + { + "fixed": "2.0.29" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.mina:mina-filter-compression" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.1.0" + }, + { + "fixed": "2.1.13" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.mina:mina-filter-compression" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.2.0" + }, + { + "fixed": "2.2.8" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", @@ -26,6 +84,10 @@ { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2026/09/21/1" + }, + { + "type": "PACKAGE", + "url": "https://github.com/apache/mina" } ], "database_specific": {