| CVE-2026-43871 |
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java…
|
8.7
High
|
Jul 27, 2026 |
| CVE-2026-41608 |
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings
|
Not rated
|
Jul 27, 2026 |
| CVE-2026-43868 |
Memory Allocation with Excessive Size Value vulnerability in Apache Thrift
|
Not rated
|
May 5, 2026 |
| CVE-2026-43870 |
Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper…
|
Not rated
|
May 5, 2026 |
| CVE-2026-43869 |
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift
|
Not rated
|
May 5, 2026 |
| CVE-2026-41636 |
Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings
This issue affects Apache Thrift: before 0.23.0
|
8.7
High
|
Apr 28, 2026 |
| CVE-2026-41607 |
Out-of-bounds Read vulnerability in Apache Thrift
|
Not rated
|
Apr 28, 2026 |
| CVE-2026-41606 |
Uncontrolled Recursion vulnerability in Apache Thrift
|
Not rated
|
Apr 28, 2026 |
| CVE-2026-41605 |
Integer Overflow or Wraparound vulnerability in Apache Thrift
|
Not rated
|
Apr 28, 2026 |
| CVE-2026-41604 |
Out-of-bounds Read vulnerability in Apache Thrift
|
Not rated
|
Apr 28, 2026 |
| CVE-2026-41603 |
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift
|
Not rated
|
Apr 28, 2026 |
| CVE-2026-41602 |
Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue…
|
Not rated
|
Apr 28, 2026 |
| CVE-2025-48431 |
Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings
|
Not rated
|
Apr 28, 2026 |
| CVE-2018-1320 |
Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the…
|
Not rated
|
Jan 7, 2019 |
| CVE-2018-11798 |
The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a…
|
Not rated
|
Jan 7, 2019 |
| CVE-2016-5397 |
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an…
|
Not rated
|
Feb 12, 2018 |