CVE-2026-86536

Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift all JS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0 and re-generate JS code, which fixes the issue...

EUVD-2026-91397

Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift all JS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0 and re-generate JS code, which fixes the issue...

CVE-2026-86536

Apache Thrift (versions before 0.25.0 ) is vulnerable to a prototype pollution flaw in its all JS bindings . The root cause allows a map key from the wire to replace a decoded object's prototype in the generated JavaScript code. To remediate this issue, users are recommended to upgrade to version...