Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Advisory: Apache Thrift — lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql Clear all filters
TI-2026-30157 CVE-2026-41636 · GHSA-r67j-r569-jrwp

Apache Thrift: Node.js skip() recursion

Priority MEDIUM 44

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00451 Published 2026-04-28 Partial fix · 0.23.0 CWE-674
TI-2026-30148 CVE-2026-41607 · GHSA-7gqw-825c-3842

Apache Thrift: C++ JSON OOB read

Priority LOW 37

Out-of-bounds Read vulnerability in Apache Thrift.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00896 Published 2026-04-28 Partial fix · 0.23.0 CWE-125
TI-2026-30147 CVE-2026-41606 · GHSA-h5hj-56h4-rwcp

Apache Thrift: c_glib dispatch stack overflow

Priority LOW 32

Uncontrolled Recursion vulnerability in Apache Thrift.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01101 Published 2026-04-28 Partial fix · 0.23.0 CWE-674
TI-2026-30145 CVE-2026-41604 · GHSA-r4rx-ffxv-23vw

Apache Thrift: Swift Range crash in skip()

Priority MEDIUM 43

Out-of-bounds Read vulnerability in Apache Thrift.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00918 Published 2026-04-28 Partial fix · 0.23.0 CWE-125
TI-2026-30144 CVE-2026-41602 · GHSA-wf45-q9ch-q8gh

Apache Thrift: Go TFramedTransport uint32 overflow

Priority MEDIUM 41

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01163 Published 2026-04-28 Partial fix · 0.23.0 CWE-190