Most recent entries from all

BIT-thrift-2026-41606 — Apache Thrift: c_glib dispatch stack overflow

Affected: Bitnami: thrift

Uncontrolled Recursion vulnerability in Apache Thrift.

This issue affects Apache Thrift: before 0.23.0.

Users are recommended to upgrade to version 0.23.0, which fixes the issue.

certfr-2026-avi-1165 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2026-avi-1165

EUVD-2026-365488

fkie_cve-2026-41606

Uncontrolled Recursion vulnerability in Apache Thrift.

This issue affects Apache Thrift: before 0.23.0.

Users are recommended to upgrade to version 0.23.0, which fixes the issue.

GHSA-h5hj-56h4-rwcp

Uncontrolled Recursion vulnerability in Apache Thrift.

This issue affects Apache Thrift: before 0.23.0.

Users are recommended to upgrade to version 0.23.0, which fixes the issue.

msrc_CVE-2026-41606 — Apache Thrift: c_glib dispatch stack overflow

msrc_CVE-2026-41606

openSUSE-SU-2026:10685-1 — libthrift-0_23_0-0.23.0-1.1 on GA media

libthrift-0_23_0-0.23.0-1.1 on GA media

RHSA-2026:14885 — Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.9.3 release

github.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementation Apache Thrift: apache.com/apache/thrift: Apache Thrift: Security Bypass via Improper Certificate Hostname Validation Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability Apache Thrift: Apache Thrift: Integer Overflow or Wraparound Vulnerability Apache Thrift: Apache Thrift: Denial of Service via uncontrolled recursion Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability

SUSE-SU-2026:23853-1 — Security update for alloy

Security update for alloy

UBUNTU-CVE-2026-41606

Affected: Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:25.10: thrift, Ubuntu:26.04:LTS: thrift

Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

WID-SEC-W-2026-1415 — Red Hat OpenShift Tempo (Apache Thrift): Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Tempo ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.