https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T18:24:03.563381+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bit-thrift-2026-48586 BIT-thrift-2026-48586 — Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression… 2026-09-28T18:24:06.278113+00:00

Affected: Bitnami: thrift

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

 https://vulnerability.circl.lu/vuln/cleanstart-2026-xi80566 CLEANSTART-2026-XI80566 — Security fix for CVE-2026-48586 applied in: spark 3.5.9-r2 2026-09-28T18:24:06.278300+00:00

Affected: CleanStart: spark

Security vulnerability affects the spark package. This issue is resolved in later releases. See references for vulnerability details.

 https://vulnerability.circl.lu/vuln/fkie_cve-2026-48586 fkie_cve-2026-48586 2026-09-28T18:24:06.278381+00:00

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

 https://vulnerability.circl.lu/vuln/ghsa-6h9h-5c4r-fqgf GHSA-6h9h-5c4r-fqgf 2026-09-28T18:24:06.278441+00:00

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

 https://vulnerability.circl.lu/vuln/msrc_cve-2026-48586 msrc_CVE-2026-48586 — Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression… 2026-09-28T18:24:06.278473+00:00 msrc_CVE-2026-48586 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11432-1 openSUSE-SU-2026:11432-1 — libthrift-0_24_0-0.24.0-1.1 on GA media 2026-09-28T18:24:06.278508+00:00

libthrift-0_24_0-0.24.0-1.1 on GA media

 https://vulnerability.circl.lu/vuln/rhsa-2026:43581 RHSA-2026:43581 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-09-28T18:24:06.278556+00:00

thrift: org.apache.thrift/libthrift: github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of highly compressed data golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-48586 UBUNTU-CVE-2026-48586 2026-09-28T18:24:06.278593+00:00

Affected: Ubuntu:16.04:LTS: libthrift-java, Ubuntu:18.04:LTS: libthrift-java, Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: libthrift-java, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: libthrift-java, Ubuntu:24.04:LTS: thrift, Ubuntu:26.04:LTS: libthrift-java, Ubuntu:26.04:LTS: thrift

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.