Most recent entries from all

BIT-thrift-2026-41608 — Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport

2026-10-03T08:14:22.364998+00:00

Affected: Bitnami: thrift

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

BREW-evernote-backup-CVE-2026-41608 — Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability

2026-10-03T08:14:22.365054+00:00

Affected: Homebrew: evernote-backup

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

EUVD-2026-342065

2026-10-03T08:14:22.365081+00:00

EUVD-2026-342065

fkie_cve-2026-41608

2026-10-03T08:14:22.365097+00:00

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

GHSA-6pjx-3pjc-mrj8 — Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability

2026-10-03T08:14:22.365120+00:00

Affected: PyPI: thrift

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

msrc_CVE-2026-41608 — Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport

2026-10-03T08:14:22.365142+00:00

msrc_CVE-2026-41608

openSUSE-SU-2026:11432-1 — libthrift-0_24_0-0.24.0-1.1 on GA media

2026-10-03T08:14:22.365160+00:00

libthrift-0_24_0-0.24.0-1.1 on GA media

PYSEC-2026-3925 — Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability

2026-10-03T08:14:22.365185+00:00

Affected: PyPI: thrift

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

RHSA-2026:49837 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

2026-10-03T08:14:22.365206+00:00

thrift: Apache Thrift Python bindings: Denial of Service via data amplification thrift: Apache Thrift: Denial of Service via infinite loop thrift: Apache Thrift: Denial of Service due to uncontrolled resource allocation thrift: Apache Thrift Ruby bindings: Denial of Service via improper handling of highly compressed data thrift: Apache Thrift Node.js bindings: Denial of Service due to inefficient algorithmic complexity and resource allocation thrift: Apache Thrift C++ bindings: Information disclosure due to buffer over-read vulnerability thrift: Apache Thrift C++ bindings: Remote code execution via heap-based buffer overflow thrift: Apache Thrift: Information disclosure and denial of service due to out-of-bounds read thrift: Apache Thrift Python bindings: Information disclosure due to improper certificate validation

UBUNTU-CVE-2026-41608

2026-10-03T08:14:22.365240+00:00

Affected: Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:26.04:LTS: thrift

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.