thrift

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.3

CVE-2026-43870

Apache Thrift: Node.js web_server.js multi-vulnerability

Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting'), Uncontrolled Resource Consumption vulnerability in Apache T…

Apache Software Foundation Apache Thrift thrift thrift Debian Ubuntu npm

May 5, 2026
High 8.7

CVE-2026-41636

Apache Thrift: Node.js skip() recursion

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Apache Software Foundation Apache Thrift thrift thrift Debian Ubuntu Azure Linux Alpine npm

Apr 28, 2026