| CVE-2026-43871 |
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java…
|
8.7
Élevée
|
27 juil. 2026 |
| CVE-2026-41608 |
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings
|
Non notée
|
27 juil. 2026 |
| CVE-2026-43868 |
Memory Allocation with Excessive Size Value vulnerability in Apache Thrift
|
Non notée
|
5 mai 2026 |
| CVE-2026-43870 |
Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper…
|
Non notée
|
5 mai 2026 |
| CVE-2026-43869 |
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift
|
Non notée
|
5 mai 2026 |
| CVE-2026-41636 |
Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings
This issue affects Apache Thrift: before 0.23.0
|
8.7
Élevée
|
28 avr. 2026 |
| CVE-2026-41607 |
Out-of-bounds Read vulnerability in Apache Thrift
|
Non notée
|
28 avr. 2026 |
| CVE-2026-41606 |
Uncontrolled Recursion vulnerability in Apache Thrift
|
Non notée
|
28 avr. 2026 |
| CVE-2026-41605 |
Integer Overflow or Wraparound vulnerability in Apache Thrift
|
Non notée
|
28 avr. 2026 |
| CVE-2026-41604 |
Out-of-bounds Read vulnerability in Apache Thrift
|
Non notée
|
28 avr. 2026 |
| CVE-2026-41603 |
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift
|
Non notée
|
28 avr. 2026 |
| CVE-2026-41602 |
Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue…
|
Non notée
|
28 avr. 2026 |
| CVE-2025-48431 |
Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings
|
Non notée
|
28 avr. 2026 |
| CVE-2018-1320 |
Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the…
|
Non notée
|
7 janv. 2019 |
| CVE-2018-11798 |
The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a…
|
Non notée
|
7 janv. 2019 |
| CVE-2016-5397 |
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an…
|
Non notée
|
12 févr. 2018 |