https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:41:08 +0000 https://cve.radiocsirt.org/vuln/bit-thrift-2026-41602 <p><strong>Affected:</strong> Bitnami: thrift</p> <p>Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation</p> <p>This issue affects Apache Thrift: before 0.23.0.</p> <p>Users are recommended to upgrade to version 0.23.0, which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: thrift</p> <p>Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation</p> <p>This issue affects Apache Thrift: before 0.23.0.</p> <p>Users are recommended to upgrade to version 0.23.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/bit-thrift-2026-41602 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0588 certfr-2026-avi-0588 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0588 https://cve.radiocsirt.org/vuln/cleanstart-2026-ar38431 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: vault</p> <p>Multiple security vulnerabilities affect the vault package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: vault</p> <p>Multiple security vulnerabilities affect the vault package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ar38431 https://cve.radiocsirt.org/vuln/euvd-2026-365470 EUVD-2026-365470 https://cve.radiocsirt.org/vuln/euvd-2026-365470 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41602 <p>Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation</p> <p>This issue affects Apache Thrift: before 0.23.0.</p> <p>Users are recommended to upgrade to version 0.23.0, which fixes the issue.</p> <p>Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation</p> <p>This issue affects Apache Thrift: before 0.23.0.</p> <p>Users are recommended to upgrade to version 0.23.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-41602 https://cve.radiocsirt.org/vuln/ghsa-wf45-q9ch-q8gh <p><strong>Affected:</strong> Go: github.com/apache/thrift</p> <p>Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation</p> <p>This issue affects Apache Thrift: before 0.23.0.</p> <p>Users are recommended to upgrade to version 0.23.0, which fixes the issue.</p> <p><strong>Affected:</strong> Go: github.com/apache/thrift</p> <p>Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation</p> <p>This issue affects Apache Thrift: before 0.23.0.</p> <p>Users are recommended to upgrade to version 0.23.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-wf45-q9ch-q8gh https://cve.radiocsirt.org/vuln/msrc_cve-2026-41602 msrc_CVE-2026-41602 https://cve.radiocsirt.org/vuln/msrc_cve-2026-41602 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10685-1 <p>libthrift-0_23_0-0.23.0-1.1 on GA media</p> <p>libthrift-0_23_0-0.23.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10685-1 https://cve.radiocsirt.org/vuln/rhsa-2026:14162 <p>libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages github.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementation</p> <p>libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages github.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementation</p> https://cve.radiocsirt.org/vuln/rhsa-2026:14162 https://cve.radiocsirt.org/vuln/suse-su-2026:21852-1 <p>Security update for alloy</p> <p>Security update for alloy</p> https://cve.radiocsirt.org/vuln/suse-su-2026:21852-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-41602 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:25.10: thrift, Ubuntu:26.04:LTS: thrift</p> <p>Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:25.10: thrift, Ubuntu:26.04:LTS: thrift</p> <p>Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-41602 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1415 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Tempo ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Tempo ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1415