← All credits
Sylwester Lachiewicz
15 vulnerability records and advisories credit this contributor.
CVE-2026-94656
Apache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size bound
CVE-2026-94657
Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound
CVE-2026-94650
Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion)
CVE-2026-94646
Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers)
CVE-2026-94633
Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length