https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 18:24:03 +0000 https://vulnerability.circl.lu/vuln/bit-thrift-2026-48586 <p><strong>Affected:</strong> Bitnami: thrift</p> <p>Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.</p> <p>This issue affects Apache Thrift: before 0.24.0.</p> <p>Users are recommended to upgrade to version 0.24.0, which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: thrift</p> <p>Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.</p> <p>This issue affects Apache Thrift: before 0.24.0.</p> <p>Users are recommended to upgrade to version 0.24.0, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/bit-thrift-2026-48586 https://vulnerability.circl.lu/vuln/cleanstart-2026-xi80566 <p><strong>Affected:</strong> CleanStart: spark</p> <p>Security vulnerability affects the spark package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: spark</p> <p>Security vulnerability affects the spark package. This issue is resolved in later releases. See references for vulnerability details.</p> https://vulnerability.circl.lu/vuln/cleanstart-2026-xi80566 https://vulnerability.circl.lu/vuln/fkie_cve-2026-48586 <p>Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.</p> <p>This issue affects Apache Thrift: before 0.24.0.</p> <p>Users are recommended to upgrade to version 0.24.0, which fixes the issue.</p> <p>Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.</p> <p>This issue affects Apache Thrift: before 0.24.0.</p> <p>Users are recommended to upgrade to version 0.24.0, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-48586 https://vulnerability.circl.lu/vuln/ghsa-6h9h-5c4r-fqgf <p>Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.</p> <p>This issue affects Apache Thrift: before 0.24.0.</p> <p>Users are recommended to upgrade to version 0.24.0, which fixes the issue.</p> <p>Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.</p> <p>This issue affects Apache Thrift: before 0.24.0.</p> <p>Users are recommended to upgrade to version 0.24.0, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/ghsa-6h9h-5c4r-fqgf https://vulnerability.circl.lu/vuln/msrc_cve-2026-48586 msrc_CVE-2026-48586 https://vulnerability.circl.lu/vuln/msrc_cve-2026-48586 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11432-1 <p>libthrift-0_24_0-0.24.0-1.1 on GA media</p> <p>libthrift-0_24_0-0.24.0-1.1 on GA media</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:11432-1 https://vulnerability.circl.lu/vuln/rhsa-2026:43581 <p>thrift: org.apache.thrift/libthrift: github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of highly compressed data golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input</p> <p>thrift: org.apache.thrift/libthrift: github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of highly compressed data golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input</p> https://vulnerability.circl.lu/vuln/rhsa-2026:43581 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-48586 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libthrift-java, Ubuntu:18.04:LTS: libthrift-java, Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: libthrift-java, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: libthrift-java, Ubuntu:24.04:LTS: thrift, Ubuntu:26.04:LTS: libthrift-java, Ubuntu:26.04:LTS: thrift</p> <p>Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libthrift-java, Ubuntu:18.04:LTS: libthrift-java, Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: libthrift-java, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: libthrift-java, Ubuntu:24.04:LTS: thrift, Ubuntu:26.04:LTS: libthrift-java, Ubuntu:26.04:LTS: thrift</p> <p>Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-48586