Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit

...

CVE-2026-48586

Status and affected components: CVE-2026-48586 affects Apache Thrift bindings (C++, Java, Python, Go, D, C/GLib) with a TZlibTransport decompression size limit vulnerability. Root cause/impact: Improper handling of highly compressed data (data amplification) can impact availability and integrity ...