PT-2026-104193

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The Apache Thrift Python bindings contain an issue where resources are allocated without limits or throttling and a resource is initialized with an insecure default. Recommendations Update to...

PT-2026-104198

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The c glib bindings in Apache Thrift contain an issue involving the use of an uninitialized resource and the return of an incorrect status code. Recommendations Update to version 0.25.0...

PT-2026-104206

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift contains a memory leak and resource leak in the THeaderTransport component, where memory and resources are not released after their effective lifetime. Recommendations Update to...

PT-2026-104208

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift java bindings contain an issue involving the improper handling of exceptional conditions and the missing release of resources after their effective lifetime. Recommendations...

PT-2026-104212

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift PHP bindings contain an issue where resources are allocated without limits or throttling, which can lead to resource exhaustion. Recommendations Update to version 0.25.0...

PT-2026-104213

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift nodejs bindings contain an issue where input quantities are not properly validated, leading to the allocation of resources without limits or throttling. This can result in resour...

PT-2026-104218

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the Apache Thrift Erlang bindings where resources are allocated without limits or throttling. This can lead to excessive resource consumption. Recommendations Upgrade to...

PT-2026-104305

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the Apache Thrift dart bindings where resources are allocated without limits or throttling. This can lead to excessive resource consumption. Recommendations Update to versio...

PT-2026-104310

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the Apache Thrift ruby bindings where resources are allocated without limits or throttling. This can lead to excessive resource consumption. Recommendations Update to versio...

CVE-2026-85483: Use of Uninitialized Resource

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94645: Improper Validation of Specified Quantity in Input

Improper validation of specified quantity in input, Allocation of resources without limits or throttling vulnerability in Apache Thrift nodejs bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-92834: Use of Uninitialized Resource

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-96288: Uncontrolled Recursion

Uncontrolled Recursion, Allocation of resources without limits or throttling vulnerability in Apache Thrift Erlang bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-104311

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the Apache Thrift JavaME bindings where resources are allocated without limits or throttling. This can lead to resource exhaustion. Recommendations Update to version 0.25.0...

PT-2026-104295

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The Apache Thrift C++ WebSocket server contains an issue involving the use of an uninitialized resource and the return of an incorrect status code. Recommendations Update to version 0.25.0...

Gitea UpdatePullRequest Function Use-After-Free

The vulnerability of the UpdatePullRequest function in the routers/api/v1/repo/pull.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and...

Gitea ParseControlFile Function DoS

The vulnerability of the ParseControlFile function in the modules/packages/debian/metadata.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PyJWT get_signing_key_from_jwt DoS

The vulnerability of the getsigningkeyfromjwt function in the PyJWT library is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

pbkdf2 library DoS

The vulnerability in the lib/sync.js script of the pbkdf2 library on the Node.js software platform involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

SUSE SLED15 / SLES15 Security Update : python-tornado6 (SUSE-SU-2026:4403-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4403-1 advisory. - CVE-2023-54397: Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsin...