Lucene search
+L

3 matches found

osv_bit
osv_bit
•added 2026/10/09 10:53 a.m.•19 views

BIT-THRIFT-2026-96292 Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic)

Inefficient regular expression complexity, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.2CVSS5.8AI score0.00426EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/02 11:11 a.m.•9 views

CVE-2026-96292 Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic)

Inefficient regular expression complexity, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.2CVSS5.8AI score0.00426EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/02 11:11 a.m.•48 views

CVE-2026-96292 Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic)

Inefficient regular expression complexity, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.2CVSS0.00426EPSS
SaveExploits0References2
Rows per page
Query Builder