Thrift

thrift

Vendor: Apache • 33 CVEs

CVEs (33)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-66053 1Apache 1Thrift Jul 27, 2026 Jul 27, 2026 N/A· v4 5.9 MEDIUM· v3 N/A· v2 Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the...Show more Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue. This replaces CVE-2026-41603Show less
CVE-2026-58662 1Apache 1Thrift Jul 27, 2026 Jul 27, 2026 8.7 HIGH· v4 9.1 CRITICAL· v3 N/A· v2 Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, w...Show more Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.Show less
CVE-2026-58389 1Apache 1Thrift Jul 27, 2026 Jul 27, 2026 8.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the is...Show more Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.Show less
CVE-2026-58023 1Apache 1Thrift Jul 27, 2026 Jul 27, 2026 6.9 MEDIUM· v4 9.1 CRITICAL· v3 N/A· v2 Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.
CVE-2026-55971 1Apache 1Thrift Jul 28, 2026 Jul 27, 2026 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.
CVE-2026-55970 1Apache 1Thrift Jul 27, 2026 Jul 27, 2026 6.9 MEDIUM· v4 6.5 MEDIUM· v3 N/A· v2 Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.
CVE-2026-55969 1Apache 1Thrift Jul 27, 2026 Jul 27, 2026 8.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, whic...Show more Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.Show less
CVE-2026-55968 1Apache 1Thrift Jul 27, 2026 Jul 27, 2026 8.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Node.js bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrad...Show more Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Node.js bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.Show less
CVE-2026-49158 1Apache 1Thrift Jul 27, 2026 Jul 27, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which...Show more Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.Show less
CVE-2026-48586 1Apache 1Thrift Jul 27, 2026 Jul 27, 2026 8.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgra...Show more Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.Show less
CVE-2026-48145 1Apache 1Thrift Jul 27, 2026 Jul 27, 2026 8.2 HIGH· v4 7.5 HIGH· v3 N/A· v2 Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the is...Show more Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.Show less
CVE-2026-48144 1Apache 1Thrift Jul 28, 2026 Jul 27, 2026 9.1 CRITICAL· v4 9.1 CRITICAL· v3 N/A· v2 Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the...Show more Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.Show less
CVE-2026-45112 1Apache 1Thrift Jul 27, 2026 Jul 27, 2026 6.9 MEDIUM· v4 7.5 HIGH· v3 N/A· v2 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: from 0.19.0 before 0.24.0. Users are recommended to upgrade to version 0.24.0, which...Show more Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: from 0.19.0 before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.Show less
CVE-2026-43871 1Apache 1Thrift Jul 27, 2026 Jul 27, 2026 8.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0...Show more Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.Show less
CVE-2026-41608 1Apache 1Thrift Jul 28, 2026 Jul 27, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, whic...Show more Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.Show less
CVE-2026-43870 1Apache 1Thrift Jun 17, 2026 May 5, 2026 N/A· v4 7.3 HIGH· v3 N/A· v2 Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting'), Uncontrolled Resourc...Show more Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting'), Uncontrolled Resource Consumption vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.Show less
CVE-2026-43868 1Apache 1Thrift Jul 21, 2026 May 5, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.
CVE-2026-43869 1Apache 1Thrift Sep 7, 2026 May 5, 2026 N/A· v4 7.3 HIGH· v3 N/A· v2 Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.
CVE-2026-41636 1Apache 1Thrift Jun 17, 2026 Apr 28, 2026 8.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.
CVE-2026-41607 1Apache 1Thrift Sep 7, 2026 Apr 28, 2026 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

12 Next