You are viewing a plain text version of this content. The canonical link for it is here.
- CVE-2026-61373: Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation - posted by Jens Geyer <je...@apache.org> on 2026/10/01 23:45:53 UTC, 0 replies.
- CVE-2026-61374: Apache Thrift: Java TSaslTransport post-auth data-frame missing size limit - posted by Jens Geyer <je...@apache.org> on 2026/10/01 23:46:10 UTC, 0 replies.
- CVE-2026-63772: Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count - posted by Jens Geyer <je...@apache.org> on 2026/10/01 23:46:17 UTC, 0 replies.
- CVE-2026-66054: Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize - posted by Jens Geyer <je...@apache.org> on 2026/10/01 23:46:25 UTC, 0 replies.
- CVE-2026-66055: Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language) - posted by Jens Geyer <je...@apache.org> on 2026/10/01 23:46:33 UTC, 0 replies.
- CVE-2026-66081: Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages - posted by Jens Geyer <je...@apache.org> on 2026/10/01 23:47:01 UTC, 0 replies.
- CVE-2026-66331: Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize - posted by Jens Geyer <je...@apache.org> on 2026/10/01 23:47:06 UTC, 0 replies.
- CVE-2026-66837: Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length - posted by Jens Geyer <je...@apache.org> on 2026/10/01 23:47:12 UTC, 0 replies.
- CVE-2026-66858: Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml) - posted by Jens Geyer <je...@apache.org> on 2026/10/01 23:47:19 UTC, 0 replies.
- CVE-2026-66859: Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route - posted by Jens Geyer <je...@apache.org> on 2026/10/01 23:47:26 UTC, 0 replies.
- [Python] Review request: THRIFT-6436 — improve readAll performance for fragmented reads - posted by Xinyu Tan <ta...@apache.org> on 2026/10/23 05:39:30 UTC, 0 replies.