Skip to content

Vulnerabilities of Apache Software Foundation Apache Thrift

Is your version affected?

CVE Summary Score Published
CVE-2026-94648 Allocation of resources without limits or throttling vulnerability in Apache Thrift dart bindings 8.2 High Oct 2, 2026
CVE-2026-94646 Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object… 8.7 High Oct 2, 2026
CVE-2026-94638 Allocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings 6.3 Medium Oct 2, 2026
CVE-2026-94637 Improper handling of highly compressed data (data amplification) vulnerability in Apache Thrift Go bindings 8.2 High Oct 2, 2026
CVE-2026-94636 Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments,… 8.2 High Oct 2, 2026
CVE-2026-92834 Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server 6.3 Medium Oct 2, 2026
CVE-2026-90440 Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache… 8.2 High Oct 2, 2026
CVE-2026-87117 NULL pointer dereference vulnerability in Apache Thrift PHP bindings 8.7 High Oct 2, 2026
CVE-2026-86537 Uncaught exception, Loop with unreachable exit condition ('infinite loop'), Integer underflow (wrap or wraparound)… 8.7 High Oct 2, 2026
CVE-2026-86536 Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift… 6.3 Medium Oct 2, 2026
CVE-2026-86535 Loop with unreachable exit condition ('infinite loop'), Improperly controlled modification of object prototype… 8.7 High Oct 2, 2026
CVE-2026-85088 Improper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift 6.9 Medium Oct 2, 2026
CVE-2026-85087 Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings 6.9 Medium Oct 2, 2026
CVE-2026-85086 Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift… 6.9 Medium Oct 2, 2026
CVE-2026-82459 Integer underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport 8.2 High Oct 2, 2026
CVE-2026-82458 Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in… 8.7 High Oct 2, 2026
CVE-2026-96288 Uncontrolled Recursion, Allocation of resources without limits or throttling vulnerability in Apache Thrift Erlang… 8.2 High Oct 2, 2026
CVE-2026-96292 Inefficient regular expression complexity, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua… 8.2 High Oct 2, 2026
CVE-2026-96294 Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift NodeJS bindings 8.7 High Oct 2, 2026
CVE-2026-61373 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer 8.7 High Oct 2, 2026
CVE-2026-96990 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Erlang bindings 8.2 High Oct 2, 2026
CVE-2026-94642 Uncaught exception vulnerability in Apache Thrift PHP bindings 8.7 High Oct 2, 2026
CVE-2026-94644 Allocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings 8.2 High Oct 2, 2026
CVE-2026-94645 Improper validation of specified quantity in input, Allocation of resources without limits or throttling vulnerability… 8.2 High Oct 2, 2026
CVE-2026-94650 Uncontrolled Recursion vulnerability in Apache Thrift c_glib bindings 8.2 High Oct 2, 2026

Other Apache Software Foundation products