Apache warns of critical flaws in MINA, HugeGraph, Traffic Control

The Apache Software Foundation released urgent security updates for three critical vulnerabilities affecting Apache MINA (CVE-2024-52046 — unsafe Java deserialization potentially enabling RCE, fixed in MINA 2.0.27/2.1.10/2.2.4 with additional configuration required), Apache HugeGraph-Server (CVE-2024-43441 — authentication bypass, fixed in HugeGraph-Server 1.5.0), and Apache Traffic Control/Traffic Ops (CVE-2024-45387 — SQL injection, fixed in Traffic Control 8.0.2); system administrators are strongly advised to upgrade and apply recommended mitigations immediately, especially given high severity scores and increased exploitation risk during holiday periods.