https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:47:52.786916+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-43870 CVE-2026-43870 — Apache Thrift: Node.js web_server.js multi-vulnerability 2026-10-06T19:47:52.788896+00:00

Affected: Apache Software Foundation Apache Thrift

Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting'), Uncontrolled Resource Consumption vulnerability in Apache Thrift.

This issue affects Apache Thrift: before 0.23.0.

Users are recommended to upgrade to version 0.23.0, which fixes the issue.