CVE-2026-86537

Uncaught exception, Loop with unreachable exit condition 'infinite loop', Integer underflow wrap or wraparound vulnerability in Apache Thrift D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-86535 Apache Thrift: A JSON member name can stall the Node server's event loop indefinitely

Loop with unreachable exit condition 'infinite loop', Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift NodeJS bindings with TJSONProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

EUVD-2026-91452

Loop with unreachable exit condition 'infinite loop', Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift NodeJS bindings with TJSONProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

CVE-2026-86535

A flaw in Apache Thrift (versions before 0.25.0 ) allows a remote attacker to exploit the NodeJS bindings when using TJSONProtocol . By submitting specially crafted messages, an attacker can trigger an infinite loop or cause prototype pollution (unintended modification of shared object attributes...

CVE-2026-86535

Loop with unreachable exit condition 'infinite loop', Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift NodeJS bindings with TJSONProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

CVE-2026-86535

Loop with unreachable exit condition 'infinite loop', Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift NodeJS bindings with TJSONProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

MGASA-2026-0465 Updated wireshark package fixes security vulnerabilities

Loop with Unreachable Exit Condition 'Infinite Loop' in Wireshark. CVE-2026-15163 Heap-based Buffer Overflow in ciscodump. CVE-2026-15164 Heap-based Buffer Overflow in Wireshark. CVE-2026-15165 Stack-based Buffer Overflow in Wireshark. CVE-2026-15166 Stack-based Buffer Overflow in Wireshark...

Updated wireshark package fixes security vulnerabilities

Loop with Unreachable Exit Condition 'Infinite Loop' in Wireshark. CVE-2026-15163 Heap-based Buffer Overflow in ciscodump. CVE-2026-15164 Heap-based Buffer Overflow in Wireshark. CVE-2026-15165 Stack-based Buffer Overflow in Wireshark. CVE-2026-15166 Stack-based Buffer Overflow in Wireshark...

CVE-2026-86537: Uncaught Exception

Uncaught exception, Loop with unreachable exit condition 'infinite loop', Integer underflow wrap or wraparound vulnerability in Apache Thrift D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-105485

Impact A denial-of-service infinite loop can occur in text / textSync when both: - whitespaceBreak: true is set, and - width is set smaller than the rendered width of a single FIGlet character. Under these conditions breakWord could never find a valid break point, so the word-wrapping loop in...

CVE-2026-86535: Loop with Unreachable Exit Condition

Loop with unreachable exit condition 'infinite loop', Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift NodeJS bindings with TJSONProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

PT-2026-104290

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift NodeJS bindings using TJSONProtocol contain an infinite loop caused by an unreachable exit condition and a prototype pollution issue, which occurs when object prototype attribute...

PT-2026-104292

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The D language bindings contain an integer underflow wrap or wraparound issue, which can lead to an uncaught exception and a loop with an unreachable exit condition, resulting in an infinite...

PT-2026-104303

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description A loop with an unreachable exit condition, resulting in an infinite loop, exists within the c glib bindings. Recommendations Update to version 0.25.0...

PT-2026-104308

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An infinite loop occurs in the Apache Thrift python bindings due to an unreachable exit condition. Recommendations Upgrade to version 0.25.0...

CVE-2026-85476: Loop with Unreachable Exit Condition

Loop with unreachable exit condition 'infinite loop' vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94654: Loop with Unreachable Exit Condition

Loop with unreachable exit condition 'infinite loop' vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PYSEC-2026-4176 urllib3: Chunked Deflate streaming can enter an infinite loop

Impact urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading content in chunks instead of loading the entire response body into memory at once. urllib3 can decompress response bodies according to the HTTP Content-Encoding header. When streaming a...

urllib3: Chunked Deflate streaming can enter an infinite loop

Impacturllib3's streaming API is designed for the efficient handling of large HTTP responses by reading content in chunks instead of loading the entire response body into memory at once.urllib3 can decompress response bodies according to the HTTP Content-Encoding header. When streaming a...

PYSEC-2026-4026 AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION

Summary A malicious SSH server can wedge an AsyncSSH client, and an authenticated client can wedge an AsyncSSH server, by sending a channel maximum packet size of 0 in SSHMSGCHANNELOPENCONFIRMATION server→client or SSHMSGCHANNELOPEN client→server. AsyncSSH stores the peer-supplied value verbatim...