Apache Software Foundation
Apache Neethi 3.2.4 Addresses Five Policy Processing Flaws
09/21/2026
Crafted policies can exhaust memory, multiply processing work or keep remote fetches open in Apache Neethi. Update the deployed dependency and validate parsing, normalization and reference handling with approved inputs, considering which policy sources the application trusts.
Apache MINA Releases Bound Zlib Decompression
09/21/2026
Apache MINA's inbound CompressionFilter can allocate unbounded memory while expanding data. Upgrade the matching branch and configure a decompressed-size limit; validate ordinary traffic and limit handling outside production rather than treating a dependency update as sufficient.