PT-2026-104193

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The Apache Thrift Python bindings contain an issue where resources are allocated without limits or throttling and a resource is initialized with an insecure default. Recommendations Update to...

PT-2026-104214

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Uncontrolled recursion occurs within the c glib bindings. Uncontrolled recursion is a condition where a function calls itself without a proper termination condition, potentially leading to a...

PT-2026-104310

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the Apache Thrift ruby bindings where resources are allocated without limits or throttling. This can lead to excessive resource consumption. Recommendations Update to versio...

PT-2026-104316

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Uncontrolled recursion occurs within the PHP bindings of Apache Thrift. Uncontrolled recursion is a condition where a function calls itself without a proper termination condition, potentially...

PT-2026-104315

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Inefficient Algorithmic Complexity in the Perl bindings of Apache Thrift. Recommendations Upgrade to version 0.25.0...

PT-2026-104312

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Inefficient Algorithmic Complexity in the Lua bindings. This issue occurs when the software processes data in a way that leads to excessive resource consumption due to the underlying algorithm...

PT-2026-104327

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An uncontrolled recursion issue exists in the Go bindings. Both Go transports attempt to satisfy a read from a buffered frame; if the frame contains no payload bytes, the system reads the next...

PT-2026-104288

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift python bindings contain an issue involving improper certificate validation and the return of incorrect status codes. Recommendations Upgrade to version 0.25.0...

PT-2026-104289

Name of the Vulnerable Software and Affected Versions Apache Thrift C++ library versions 0.7.0 through 0.24.0 Apache Thrift D library versions 0.9.0 through 0.24.0 Description Improper validation of certificates with host mismatches occurs in the C++ and D libraries. The default access manager fo...

PT-2026-104293

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description A NULL pointer dereference occurs within the Apache Thrift PHP bindings. A NULL pointer dereference is a condition where a program attempts to read or write to a memory address that is NULL,...

PT-2026-104205

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description A stack-based buffer overflow and an incorrect bitwise shift of integer occur in the Apache Thrift C++ THeaderProtocol. A stack-based buffer overflow happens when a program writes more data to...

PT-2026-104211

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An uncaught exception issue exists within the Apache Thrift PHP bindings. Recommendations Upgrade to version 0.25.0...

PT-2026-104203

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description A heap-based buffer overflow exists in the C++ THeaderTransport component. When the ZLIB transform is enabled for sent frames, the transform function copies the compressed frame into the write...

PT-2026-104303

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description A loop with an unreachable exit condition, resulting in an infinite loop, exists within the c glib bindings. Recommendations Update to version 0.25.0...

PT-2026-104291

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description All JavaScript bindings in Apache Thrift are subject to prototype pollution, a condition where an attacker can manipulate the prototype of an object to inject properties or modify existing one...

PT-2026-104290

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift NodeJS bindings using TJSONProtocol contain an infinite loop caused by an unreachable exit condition and a prototype pollution issue, which occurs when object prototype attribute...

Linux Distros Unpatched Vulnerability : CVE-2026-56154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through...

Linux Distros Unpatched Vulnerability : CVE-2026-73637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in modauthdigest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause...

PT-2026-104331

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift Java bindings contain an issue where resources are allocated without limits or throttling, which can lead to resource exhaustion. Recommendations Upgrade to version 0.25.0...

PT-2026-104210

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An allocation of resources without limits or throttling issue exists in the Java TSaslNonblockingServer. This occurs when the server fails to properly restrict the consumption of system...