CVE-2026-84161

CodeChecker 6.29.0 is vulnerable to an authenticated remote denial of service (DoS) due to unbounded zlib decompression in the storeAnalysisStatistics Thrift-over-HTTP method. If an operator enables store.analysis_statistics_dir , a network client with PRODUCT_STORE permissions can provide an att...

GHSA-R86J-2GC6-2CQ9 Race condition in org.apache.hbase:hbase-thrift

An issue in Apache HBase affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an unauthenticated user would be...