CVE-2026-47321: Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate
Apache MINA CompressionFilter allows unbounded zlib inflation, enabling a decompression-amplification denial of service.
CVE-2026-47321 is an unbounded decompression flaw in Apache MINA's mina-filter-compression component. CompressionFilter uses Zlib to inflate incoming data but does not limit the resulting size, allowing a decompression-amplification denial of service. Affected versions are 2.2.0 before 2.2.8, 2.1.0 before 2.1.13, and 2.0.0 before 2.0.29. The oss-security post does not report exploitation in the wild.
48