PT-2026-104214

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Uncontrolled recursion occurs within the c glib bindings. Uncontrolled recursion is a condition where a function calls itself without a proper termination condition, potentially leading to a...

PT-2026-104324

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The protocol skip routine in several Apache Thrift bindings fails to apply the recursion limit. This allows a message containing deeply nested unknown fields to exhaust the stack, potentially...

PT-2026-104182

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An uncaught exception vulnerability exists in the Apache Thrift Java bindings due to improper handling of exceptional conditions and the allocation of resources without limits or throttling...

PT-2026-104193

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The Apache Thrift Python bindings contain an issue where resources are allocated without limits or throttling and a resource is initialized with an insecure default. Recommendations Update to...

PT-2026-104210

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An allocation of resources without limits or throttling issue exists in the Java TSaslNonblockingServer. This occurs when the server fails to properly restrict the consumption of system...

PT-2026-104212

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift PHP bindings contain an issue where resources are allocated without limits or throttling, which can lead to resource exhaustion. Recommendations Update to version 0.25.0...

PT-2026-104215

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift Erlang bindings contain an issue involving uncontrolled recursion and the allocation of resources without limits or throttling. Recommendations Upgrade to version 0.25.0...

PT-2026-104218

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the Apache Thrift Erlang bindings where resources are allocated without limits or throttling. This can lead to excessive resource consumption. Recommendations Upgrade to...

PT-2026-104287

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift perl bindings contain an issue involving improper certificate validation and the initialization of a resource with an insecure default. Recommendations Upgrade to version 0.25.0...

PT-2026-104309

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An inefficient algorithmic complexity issue exists within the Lua bindings of Apache Thrift, where resources are allocated without proper limits or throttling. Recommendations Upgrade to versi...

PT-2026-104310

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the Apache Thrift ruby bindings where resources are allocated without limits or throttling. This can lead to excessive resource consumption. Recommendations Update to versio...

PT-2026-104311

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the Apache Thrift JavaME bindings where resources are allocated without limits or throttling. This can lead to resource exhaustion. Recommendations Update to version 0.25.0...

PT-2026-104313

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift Ruby bindings contain an issue involving the improper handling of exceptional conditions, which can lead to an uncaught exception. Recommendations Upgrade to version 0.25.0...

PT-2026-104331

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift Java bindings contain an issue where resources are allocated without limits or throttling, which can lead to resource exhaustion. Recommendations Upgrade to version 0.25.0...

CVE-2026-61373: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-61374: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94639: Improper Handling of Exceptional Conditions

improper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught exception vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-104207

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift Dart bindings contain an issue involving improper handling of length parameter inconsistency, which can lead to memory allocation with an excessive size value. Recommendations...

PT-2026-104181

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Improper handling of length parameter inconsistency and allocation of resources without limits or throttling in Apache Thrift Lua bindings. Specifically, the TBinaryProtocol:readMessageBegin...

PT-2026-104312

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Inefficient Algorithmic Complexity in the Lua bindings. This issue occurs when the software processes data in a way that leads to excessive resource consumption due to the underlying algorithm...