github.com/apache/thrift

4 results · Feed

• High 8.7
  CVE-2026-43871

  Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit

  Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

  Apache Software Foundation Apache Thrift thrift thrift Debian Ubuntu Packagist Maven PyPI Go
  Jul 27, 2026
• High 7.5
  CVE-2026-41602

  Apache Thrift: Go TFramedTransport uint32 overflow

  Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

  Apache Software Foundation Apache Thrift thrift thrift Debian Ubuntu Alpine Go
  Apr 28, 2026
• High 7.5
  CVE-2019-0210

  Out-of-bounds read in Apache Thrift

  In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.

  Apache Apache Thrift thrift github.com/apache/thrift Debian Go
  Oct 28, 2019
• High 8.8
  CVE-2016-5397

  Apache Thrift Go Library Command Injection

  The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0.

  Apache Software Foundation Apache Thrift thrift github.com/apache/thrift Debian Ubuntu Go
  Feb 12, 2018