Product
Apache MINA versions 3.0.0 through 3.0.0-M2 are vulnerable to remote code execution due to unsafe deserialization in the JavaNativeMessageDecoder class.