https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T09:33:36.644714+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bit-thrift-2026-45112 BIT-thrift-2026-45112 — Apache Thrift: Unbounded Read Leading to Denial of Service 2026-09-29T09:33:36.870181+00:00

Affected: Bitnami: thrift

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings.

This issue affects Apache Thrift: from 0.19.0 before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

 https://vulnerability.circl.lu/vuln/cleanstart-2026-qf48371 CLEANSTART-2026-QF48371 — Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings 2026-09-29T09:33:36.870341+00:00

Affected: CleanStart: spark-sc212-jdk17-py311

Security vulnerability affects the spark-sc212-jdk17-py311 package. Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings.

 https://vulnerability.circl.lu/vuln/fkie_cve-2026-45112 fkie_cve-2026-45112 2026-09-29T09:33:36.870388+00:00

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings.

This issue affects Apache Thrift: from 0.19.0 before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

 https://vulnerability.circl.lu/vuln/ghsa-g9fj-fh28-776p GHSA-g9fj-fh28-776p 2026-09-29T09:33:36.870436+00:00

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings.

This issue affects Apache Thrift: from 0.19.0 before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11432-1 openSUSE-SU-2026:11432-1 — libthrift-0_24_0-0.24.0-1.1 on GA media 2026-09-29T09:33:36.870466+00:00

libthrift-0_24_0-0.24.0-1.1 on GA media

 https://vulnerability.circl.lu/vuln/rhsa-2026:49837 RHSA-2026:49837 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-09-29T09:33:36.870509+00:00

thrift: Apache Thrift Python bindings: Denial of Service via data amplification thrift: Apache Thrift: Denial of Service via infinite loop thrift: Apache Thrift: Denial of Service due to uncontrolled resource allocation thrift: Apache Thrift Ruby bindings: Denial of Service via improper handling of highly compressed data thrift: Apache Thrift Node.js bindings: Denial of Service due to inefficient algorithmic complexity and resource allocation thrift: Apache Thrift C++ bindings: Information disclosure due to buffer over-read vulnerability thrift: Apache Thrift C++ bindings: Remote code execution via heap-based buffer overflow thrift: Apache Thrift: Information disclosure and denial of service due to out-of-bounds read thrift: Apache Thrift Python bindings: Information disclosure due to improper certificate validation

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-45112 UBUNTU-CVE-2026-45112 2026-09-29T09:33:36.870572+00:00

Affected: Ubuntu:16.04:LTS: libthrift-java, Ubuntu:18.04:LTS: libthrift-java, Ubuntu:22.04:LTS: libthrift-java, Ubuntu:24.04:LTS: libthrift-java, Ubuntu:26.04:LTS: libthrift-java

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: from 0.19.0 before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.