Priority LOW 36
Allocation of Resources Without Limits or Throttling, Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++ bindings.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00277 · Published 2026-10-02 · Partial fix · 0.25.0 CWE-409
Priority LOW 31
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00248 · Published 2026-10-02 · Fixed in 0.25.0 CWE-770
Priority MEDIUM 43
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00316 · Published 2026-10-02 · Fixed in 0.25.0 CWE-770
Priority MEDIUM 41
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift C++, Java, Go, netstd, Python and Delphi bindings.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00277 · Published 2026-10-02 · Fixed in 0.25.0 CWE-770
Priority MEDIUM 43
Access of Uninitialized Pointer vulnerability in Apache Thrift c_glib bindings.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00316 · Published 2026-10-02 · Partial fix · 0.25.0 CWE-824
Priority LOW 36
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Delphi bindings buffered transport.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00277 · Published 2026-10-02 · Partial fix · 0.25.0 CWE-770
Priority MEDIUM 44
Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00349 · Published 2026-10-02 · Partial fix · 0.25.0 CWE-121
Priority MEDIUM 43
The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00307 · Published 2026-10-02 · Partial fix · 0.25.0 CWE-674
Priority MEDIUM 43
NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift c_glib bindings.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00316 · Published 2026-10-02 · Fixed in 0.25.0 CWE-457
Priority MEDIUM 41
Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00296 · Published 2026-10-02 · Partial fix · 0.25.0 CWE-122
Priority MEDIUM 43
Uncontrolled Recursion vulnerability in Apache Thrift go bindings.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00277 · Published 2026-10-02 · Partial fix · 0.25.0 CWE-674
Priority MEDIUM 44
Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00342 · Published 2026-10-02 · Partial fix · 0.25.0 CWE-130
Priority LOW 36
Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift c_glib bindings.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00332 · Published 2026-10-02 · Fixed in 0.25.0 CWE-835
Priority LOW 36
Uncontrolled Recursion vulnerability in Apache Thrift PHP bindings.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00342 · Published 2026-10-02 · Fixed in 0.25.0 CWE-674
Priority LOW 36
Inefficient Algorithmic Complexity vulnerability in Apache Thrift Perl bindings.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00342 · Published 2026-10-02 · Fixed in 0.25.0 CWE-407
Priority LOW 36
Uncaught exception vulnerability in Apache Thrift Perl bindings.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00342 · Published 2026-10-02 · Fixed in 0.25.0 CWE-248
Priority MEDIUM 44
Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00342 · Published 2026-10-02 · Fixed in 0.25.0 CWE-248
Priority MEDIUM 44
Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00342 · Published 2026-10-02 · Fixed in 0.25.0 CWE-407
Priority MEDIUM 42
Allocation of resources without limits or throttling vulnerability in Apache Thrift JavaME bindings.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00342 · Published 2026-10-02 · Partial fix · 0.25.0 CWE-770
Priority LOW 36
Allocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00342 · Published 2026-10-02 · Fixed in 0.25.0 CWE-770
Priority LOW 36
Allocation of resources without limits or throttling, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00342 · Published 2026-10-02 · Fixed in 0.25.0 CWE-407
Priority LOW 36
Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift python bindings.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00332 · Published 2026-10-02 · Fixed in 0.25.0 CWE-835
Priority LOW 35
Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00277 · Published 2026-10-02 · Fixed in 0.25.0 CWE-407
Priority LOW 28
Missing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00277 · Published 2026-10-02 · Partial fix · 0.25.0 CWE-401
Priority LOW 35
Allocation of resources without limits or throttling vulnerability in Apache Thrift dart bindings.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00277 · Published 2026-10-02 · Fixed in 0.25.0 CWE-770
Load more
THREATIST.IORead the docs