Package · PyPI

thrift

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

Medium 5.9

CVE-2026-66053

Apache Thrift: Python TSSLSocket Hostname Matcher Import

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue. This replaces CVE-2026-41603

Apache Software Foundation Apache Thrift thrift thrift Debian Ubuntu Azure Linux PyPI

Jul 27, 2026
High 8.7

CVE-2026-43871

Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

Apache Software Foundation Apache Thrift druid minio Debian Ubuntu Azure Linux Wolfi Packagist Maven PyPI Go

Jul 27, 2026
High 7.5

CVE-2026-41608

Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

Apache Software Foundation Apache Thrift thrift thrift Debian Ubuntu Azure Linux PyPI

Jul 27, 2026