https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:36:52.524451+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-thrift-2026-48586 BIT-thrift-2026-48586 — Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression… 2026-10-02T18:36:53.557825+00:00

Affected: Bitnami: thrift

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1256 certfr-2026-avi-1256 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T18:36:53.557910+00:00 certfr-2026-avi-1256 https://cve.radiocsirt.org/vuln/cleanstart-2026-cw84944 CLEANSTART-2026-CW84944 — Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go,… 2026-10-02T18:36:53.557931+00:00

Affected: CleanStart: spark-sc212-jdk17-py311

Security vulnerability affects the spark-sc212-jdk17-py311 package. Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.

 https://cve.radiocsirt.org/vuln/euvd-2026-341198 EUVD-2026-341198 2026-10-02T18:36:53.557955+00:00 EUVD-2026-341198 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48586 fkie_cve-2026-48586 2026-10-02T18:36:53.557969+00:00

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-6h9h-5c4r-fqgf GHSA-6h9h-5c4r-fqgf 2026-10-02T18:36:53.557992+00:00

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-48586 msrc_CVE-2026-48586 — Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression… 2026-10-02T18:36:53.558008+00:00 msrc_CVE-2026-48586 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11432-1 openSUSE-SU-2026:11432-1 — libthrift-0_24_0-0.24.0-1.1 on GA media 2026-10-02T18:36:53.558025+00:00

libthrift-0_24_0-0.24.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:43581 RHSA-2026:43581 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T18:36:53.558047+00:00

thrift: org.apache.thrift/libthrift: github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of highly compressed data golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-48586 UBUNTU-CVE-2026-48586 2026-10-02T18:36:53.558066+00:00

Affected: Ubuntu:16.04:LTS: libthrift-java, Ubuntu:18.04:LTS: libthrift-java, Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: libthrift-java, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: libthrift-java, Ubuntu:24.04:LTS: thrift, Ubuntu:26.04:LTS: libthrift-java, Ubuntu:26.04:LTS: thrift

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2834 WID-SEC-W-2026-2834 — Red Hat Build of Apache Camel for Quarkus (sshd-core, libthrift, org.hl7.fhir.utilities): Mehrere Schwachstellen 2026-10-02T18:36:53.558097+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux und Apache Camel ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder beliebigen Code auszuführen.