apache/thrift Security Advisories | GitStock

medium2026-07-27

Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit

GHSA-hwrj-9rr4-24xh · CVE-2026-66053

high2026-07-27

Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop

GHSA-8wv5-x4w7-5gww · CVE-2026-43871

high2026-07-27

Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability

GHSA-6pjx-3pjc-mrj8 · CVE-2026-41608

high2026-05-05

Apache Thrift has an Improper Validation of Certificate with Host Mismatch Vulnerability

GHSA-7pwc-h2j2-rjgj · CVE-2026-43869

high2026-05-05

Apache Thrift vulnerable to Path Traversal, HTTP Request/Response Splitting, Uncontrolled Resource Consumption

GHSA-526f-jxpj-jmg2 · CVE-2026-43870

medium2026-05-05

Apache Thrift has a Memory Allocation with Excessive Size Value Vulnerability

GHSA-2f9f-gq7v-9h6m · CVE-2026-43868

high2026-04-28

Apache Thrift TFramedTransport Go language implementation has an Integer Overflow or Wraparound vulnerability

GHSA-wf45-q9ch-q8gh · CVE-2026-41602

high2026-04-28

Apache Thrift Node.js bindings vulnerable to Uncontrolled Recursion

GHSA-r67j-r569-jrwp · CVE-2026-41636