26 matches found
ROOT-APP-GOBINARY-CVE-2026-41602 CVE-2026-41602 in github.com/apache/thrift - Patched by Root
Root has patched CVE-2026-41602 in the github.com/apache/thrift package for Root:Go. Multiple fixed versions available...
CLEANSTART-2026-ZB13095 Security fixes in temporal-server-fips 1.31.1-r1
Package temporal-server-fips version 1.31.1-r1 fixes 5 vulnerabilities: CVE-2026-41602, ghsa-wf45-q9ch-q8gh, ghsa-p77j-4mvh-x3m3, CVE-2026-27145, CVE-2026-33811...
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for July 2026
Summary Multiple vulnerabilities were addressed in IBM Process Mining 2.2.0 IF001 Vulnerability Details CVEID:CVE-2026-41602 DESCRIPTION: Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. User...
CLEANSTART-2026-RJ04514 Security fixes in kubernetes-event-exporter 1.7-r1
Package kubernetes-event-exporter version 1.7-r1 fixes 46 vulnerabilities: ghsa-wf45-q9ch-q8gh, ghsa-p77j-4mvh-x3m3, ghsa-gxhx-2686-5h9g, CVE-2026-41602, CVE-2026-33186...
CLEANSTART-2026-AV21509 Security fixes for CVE-2026-27145, CVE-2026-33816, CVE-2026-34986, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-41602, CVE-2026-42504, CVE-2026-42507, CVE-2026-46595, ghsa-6g7g-w4f8-9c9x, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 0.144.0-r3, 0.144.0-r4, 0.150.0-r0, 0.150.0-r1
Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. These issues are resolved in later releases. See references for individual vulnerability details...
Security update for alloy
This update for alloy fixes the following issues Security issues: CVE-2026-4427: github.com/jackc/pgproto3/v2: improper validation of field length allows a malicious PostgreSQL server to crash a client application via a DataRow message bsc1259919. CVE-2026-25934: github.com/go-git/go-git/v5:...
SUSE SLES16 Security Update : alloy (SUSE-SU-2026:21852-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:21852-1 advisory. This update for alloy fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4: crafted JWE input with a missing...
SUSE-SU-2026:21852-1 Security update for alloy
This update for alloy fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4: crafted JWE input with a missing encrypted key can lead to a denial of service bsc1262955. - CVE-2026-41602: github.com/apache/thrift: TFramedTransport frame size headers can lead to a uint32 integer...
CVE-2026-41602 affecting package telegraf for versions less than 1.31.0-20
CVE-2026-41602 affecting package telegraf for versions less than 1.31.0-20. A patched version of the package is available...
CVE-2026-41602 affecting package thrift for versions less than 0.15.0-6
CVE-2026-41602 affecting package thrift for versions less than 0.15.0-6. A patched version of the package is available...
CVE-2026-41602 vulnerabilities
Vulnerabilities for packages: temporal-server, tempo-fips, amazon-cloudwatch-agent-fips, bento-fips, loki, plutono-fips, beats-fips, vault-fips, minio-fips, nri-jmx-fips, opentelemetry-collector, jaeger, falcosidekick, splunk-otel-collector, temporal, seaweedfs-rocksdb, apm-server, jaeger-fips,...
CVE-2026-41602 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib, jitsucom-bulker, amazon-cloudwatch-agent, grafana, seaweedfs, loki, opentelemetry-collector, telegraf, splunk-otel-collector, aws-otel-collector, falcosidekick, temporal, bento, jaeger, datadog-agent, minio, grafana-alloy, nri-jmx,...
Linux Distros Unpatched Vulnerability : CVE-2026-41602
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users...
CVE-2026-41602
Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...
CVE-2026-41602
Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...
UBUNTU-CVE-2026-41602
Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...
CVE-2026-41602
Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...
CVE-2026-41602
creationtimestamp| type| source ---|---|--- 2026-04-28 01:32:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkjgupglju25 2026-04-28 15:16:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkkuudpgnt2t 2026-08-27 11:48:03+00:00| seen|...
