Apache MINA Patches Critical Framework Vulnerabilities

### Executive summary This advisory describes two severe Apache MINA vulnerabilities—CVE-2026-47065 (critical deserialization bypass, CVSS 9.8) that can permit remote code execution by bypassing the allow-list during proxy class deserialization, and CVE-2026-47321 (decompression amplification) which can trigger memory exhaustion and DoS; maintainers released fixes (MINA 2.2.8, 2.1.13, 2.0.29) and recommend immediate upgrades and configuring CompressionFilter maxDecompressedSize.