Vulnerabilities

TI-2026-31932 CVE-2026-43868 · GHSA-2f9f-gq7v-9h6m

Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

LOW 31

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00706 Published 2026-05-05 Partial fix · 0.23.0 CWE-789

TI-2026-31934 CVE-2026-43870 · GHSA-526f-jxpj-jmg2

Apache Thrift: Node.js web_server.js multi-vulnerability

LOW 38

Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting'), Uncontrolled Resourc…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00379 Published 2026-05-05 Partial fix · 0.23.0 CWE-113

TI-2026-31933 CVE-2026-43869 · GHSA-7pwc-h2j2-rjgj

Apache Thrift: TSSLTransportFactory.java hostname verification

LOW 39

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00632 Published 2026-05-05 Partial fix · 0.23.0 CWE-297

Vulnerabilities

Filters

Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Apache Thrift: Node.js web_server.js multi-vulnerability

Apache Thrift: TSSLTransportFactory.java hostname verification