Apache Software Foundation Thrift vulnerabilities

• apache software foundation thrift Apache Thrift: Java TProtocolUtil.skip() does not limit the recursion depth by default CVE-2026-120135 Fix available 8.2 HighOctober 31, 2026
• apache software foundation thrift Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize CVE-2026-66054 Fix available 6.9 MediumOctober 2, 2026
• apache software foundation thrift Apache Thrift: Java TSaslTransport post-auth data-frame missing size limit CVE-2026-61374 Fix available 7.1 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count CVE-2026-63772 Fix available 8.7 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language) CVE-2026-66055 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages CVE-2026-66081 Fix available 8.7 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize CVE-2026-66331 Fix available 6.9 MediumOctober 2, 2026
• apache software foundation thrift Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length CVE-2026-66837 Fix available 8.7 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml) CVE-2026-66858 Fix available 8.7 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route CVE-2026-66859 Fix available 8.7 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: C++ THttpTransport grows its line buffer without bound CVE-2026-83632 Fix available 9.2 CriticalOctober 2, 2026
• apache software foundation thrift Apache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go) CVE-2026-83663 Fix available 8.7 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D) CVE-2026-83745 Fix available 8.7 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: c_glib `read_all` spins when the underlying read returns 0 CVE-2026-85476 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard CVE-2026-96289 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic) CVE-2026-96287 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: Perl servers end `serve()` when serving one connection fails CVE-2026-96286 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exception CVE-2026-96277 Fix available 8.7 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: Lua `TFramedTransport`/`THttpTransport` re-slice the buffer on every read (quadratic) CVE-2026-94658 Fix available 8.7 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound CVE-2026-94657 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size bound CVE-2026-94656 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic CVE-2026-94655 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: Python `TNonblockingServer` busy-loops and stops selecting all fds after an 8192-byte-boundary frame CVE-2026-94654 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic) CVE-2026-94653 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: C++ `TEvhttpServer` leaks its `RequestContext` when the processor throws before calling back CVE-2026-94652 Fix available 6.3 MediumOctober 2, 2026
• apache software foundation thrift Apache Thrift: dart `TJsonProtocol`/`TJSONProtocol` has no string size bound CVE-2026-94648 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers) CVE-2026-94646 Fix available 8.7 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: PHP `thrift_protocol` C extension ignores the configured `maxStringSize` CVE-2026-94638 Fix available 6.3 MediumOctober 2, 2026
• apache software foundation thrift Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame CVE-2026-94637 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up CVE-2026-94636 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: C++ WebSocket server transport does not read a full request length CVE-2026-92834 Fix available 6.3 MediumOctober 2, 2026
• apache software foundation thrift Apache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthenticated remote attacker to deny service CVE-2026-90440 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec CVE-2026-87117 Fix available 8.7 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service CVE-2026-86537 Fix available 8.7 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift, Apache Thrift, Apache Thrift: A map key from the wire can replace a decoded object's prototype in generated JavaScript CVE-2026-86536 Fix available 6.3 MediumOctober 2, 2026
• apache software foundation thrift Apache Thrift: A JSON member name can stall the Node server's event loop indefinitely CVE-2026-86535 Fix available 8.7 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries are present but do not match CVE-2026-85088 Fix available 6.9 MediumOctober 2, 2026
• apache software foundation thrift Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op CVE-2026-85087 Fix available 6.9 MediumOctober 2, 2026
• apache software foundation thrift Apache Thrift: Perl TLS client disables certificate verification by default CVE-2026-85086 Fix available 6.9 MediumOctober 2, 2026
• apache software foundation thrift Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process CVE-2026-82459 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes a… CVE-2026-82458 Fix available 8.7 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory) CVE-2026-96288 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic) CVE-2026-96292 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection CVE-2026-96294 Fix available 8.7 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation CVE-2026-61373 Fix available 8.7 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound CVE-2026-96990 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception CVE-2026-94642 Fix available 8.7 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound CVE-2026-94644 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound CVE-2026-94645 Fix available 8.2 HighOctober 2, 2026
• apache software foundation thrift Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion) CVE-2026-94650 Fix available 8.2 HighOctober 2, 2026
• Show olderLoading…