Skip to contentApache Software Foundation vulnerabilities
Products
Show 140 moreShow less
Newest
- apache software foundation thriftApache Thrift: C++ WebSocket server transport does not read a full request lengthCVE-2026-92834Fix available6.3 Medium
- apache software foundation thriftApache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthenticated remote attacker to deny serviceCVE-2026-90440Fix available8.2 High
- apache software foundation thriftApache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element specCVE-2026-87117Fix available8.7 High
- apache software foundation thriftApache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny serviceCVE-2026-86537Fix available8.7 High
- apache software foundation thriftApache Thrift, Apache Thrift, Apache Thrift: A map key from the wire can replace a decoded object's prototype in generated JavaScriptCVE-2026-86536Fix available6.3 Medium
- apache software foundation thriftApache Thrift: A JSON member name can stall the Node server's event loop indefinitelyCVE-2026-86535Fix available8.7 High
- apache software foundation thriftApache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries are present but do not matchCVE-2026-85088Fix available6.9 Medium
- apache software foundation thriftApache Thrift: Python ≥3.12 host-name check silently becomes a no-opCVE-2026-85087Fix available6.9 Medium
- apache software foundation thriftApache Thrift: Perl TLS client disables certificate verification by defaultCVE-2026-85086Fix available6.9 Medium
- apache software foundation thriftApache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit processCVE-2026-82459Fix available8.2 High
- apache software foundation thriftApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes a…CVE-2026-82458Fix available8.7 High
- apache software foundation thriftApache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory)CVE-2026-96288Fix available8.2 High
- apache software foundation thriftApache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic)CVE-2026-96292Fix available8.2 High
- apache software foundation thriftApache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connectionCVE-2026-96294Fix available8.7 High
- apache software foundation thriftApache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocationCVE-2026-61373Fix available8.7 High
- apache software foundation thriftApache Thrift: Erlang thrift_json_protocol reads a whole message with no size boundCVE-2026-96990Fix available8.2 High
- apache software foundation thriftApache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exceptionCVE-2026-94642Fix available8.7 High
- apache software foundation thriftApache Thrift: PHP `TJSONProtocol` string/number readers have no size boundCVE-2026-94644Fix available8.2 High
- apache software foundation thriftApache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop boundCVE-2026-94645Fix available8.2 High
- apache software foundation thriftApache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion)CVE-2026-94650Fix available8.2 High
- apache software foundation thriftApache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse errorCVE-2026-94651Fix available8.2 High
- apache software foundation thriftApache Thrift: c_glib TZlibTransport reports a full read after a premature stream endCVE-2026-85483Fix available6.3 Medium
- apache software foundation thriftApache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME)CVE-2026-85493Fix available8.7 High
- apache software foundation thriftApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a pee…CVE-2026-85494Fix available8.7 High
- apache software foundation thriftApache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction)CVE-2026-91135Fix available9.2 Critical
- apache software foundation thriftApache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elementsCVE-2026-91137Fix available8.7 High
- apache software foundation thriftApache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol idCVE-2026-93925Fix available8.7 High
- apache software foundation thriftApache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error pathCVE-2026-93926Fix available8.7 High
- apache software foundation thriftApache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name lengthCVE-2026-94633Fix available8.7 High
- apache software foundation thriftApache Thrift: Python `TJSONProtocol` has a string length limit that is off by defaultCVE-2026-94634Fix available8.2 High
- apache software foundation directory ldap apiApache Directory LDAP API: Denial of service via crafted telephone number valuesCVE-2026-103885Fix available7.5 High
- apache software foundation directory ldap apiApache Directory LDAP API: Unsafe loading of Java code from LDAP schema elementsCVE-2026-103877Fix available9.8 Critical
- apache software foundation directory ldap apiApache Directory LDAP API: Denial of service via excessive bcrypt cost factor in stored passwordsCVE-2026-103880Fix available7.5 High
- apache software foundation directory ldap apiApache Directory LDAP API: Injection of plaintext responses during StartTLSCVE-2026-103878Fix available7.5 High
- apache software foundation directory ldap apiApache Directory LDAP API: A unbound client can send a deeply nested search filter that overflows the stack in the server's decoderCVE-2026-103552Fix available7.3 High
- apache software foundation thriftApache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget)CVE-2026-94639Fix available8.2 High
- apache software foundation directory ldap apiApache Directory LDAP API: Denial of service via excessive memory allocation in BER decodeCVE-2026-102731Fix available7.5 High
- apache software foundation thriftApache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned nameCVE-2026-94635Fix available8.7 High
- apache http serverApache HTTP Server: mod_xml2enc crash on charset conversion failureCVE-2026-63686Public exploitFix available7.5 High
- apache http serverApache HTTP Server: mod_dav_fs namespace overflowCVE-2026-93546Fix available8.8 High
- apache http serverApache HTTP Server: mod_userdir information disclosureCVE-2026-79768Fix available5.3 Medium
- apache http serverApache HTTP Server: mod_auth_digest DoS attackCVE-2026-73637Fix available7.3 High
- apache http serverApache HTTP Server: mod_auth_digest one-time-nonce replay attackCVE-2026-73636Fix available8.1 High
- apache http serverApache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smugglingCVE-2026-63718Fix available7.5 High
- apache http serverApache HTTP Server: mod_vhost_alias stack overflowCVE-2026-63292Public exploitFix available7.5 High
- apache http serverApache HTTP Server: mod_proxy_ftp PASV address handlingCVE-2026-63045Fix available7.5 High
- apache http serverApache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-functionCVE-2026-59797Fix available9.8 Critical
- apache http serverApache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEMCVE-2026-59685Fix available7.5 High
- apache http serverApache HTTP Server: mod_dav_fs property database read accessCVE-2026-58415Fix available5.3 Medium
- apache http serverApache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancyCVE-2026-57941Fix available9.8 Critical
- Show moreLoading…