Apache

Thrift

33 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.9

CVE-2026-66053

  • EPSS 0.31%
  • Veröffentlicht 27.07.2026 11:18:49
  • Zuletzt bearbeitet 27.07.2026 19:52:47

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue. This replaces CVE-202...

9.1

CVE-2026-58662

  • EPSS 1.15%
  • Veröffentlicht 27.07.2026 11:17:26
  • Zuletzt bearbeitet 27.07.2026 19:51:48

Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

7.5

CVE-2026-58389

  • EPSS 1.1%
  • Veröffentlicht 27.07.2026 11:14:30
  • Zuletzt bearbeitet 27.07.2026 19:51:26

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

9.1

CVE-2026-58023

  • EPSS 1.08%
  • Veröffentlicht 27.07.2026 11:12:40
  • Zuletzt bearbeitet 27.07.2026 19:51:16

Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

9.8

CVE-2026-55971

  • EPSS 1.04%
  • Veröffentlicht 27.07.2026 11:11:23
  • Zuletzt bearbeitet 28.07.2026 05:17:06

Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

6.5

CVE-2026-55970

  • EPSS 0.83%
  • Veröffentlicht 27.07.2026 11:09:41
  • Zuletzt bearbeitet 27.07.2026 19:50:45

Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

7.5

CVE-2026-55969

  • EPSS 1.1%
  • Veröffentlicht 27.07.2026 11:07:53
  • Zuletzt bearbeitet 27.07.2026 19:50:33

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

7.5

CVE-2026-55968

  • EPSS 1.1%
  • Veröffentlicht 27.07.2026 11:06:17
  • Zuletzt bearbeitet 27.07.2026 19:50:17

Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Node.js bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fix...

7.5

CVE-2026-49158

  • EPSS 1.1%
  • Veröffentlicht 27.07.2026 11:05:07
  • Zuletzt bearbeitet 27.07.2026 19:50:09

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

7.5

CVE-2026-48586

  • EPSS 1.07%
  • Veröffentlicht 27.07.2026 11:02:54
  • Zuletzt bearbeitet 27.07.2026 19:49:42

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fi...