EUVD-2026-49145

Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

CVE-2026-41608

CVE-2026-41608 affects Apache Thrift Python bindings prior to 0.24.0, due to an unbounded zlib decompression in the Python THeaderTransport path (Data Amplification). The vulnerability could enable excessive resource consumption under crafted compressed data. A fix is available in Thrift 0.24.0; ...

CVE-2026-41608 Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport

Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

CVE-2026-41608

Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

CVE-2026-41608 Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport

Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

CVE-2026-41608

Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

CVE-2026-41608 Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport

Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

[SECURITY] Fedora 44 Update: rust-libgit2-sys-0.18.7-1.fc44

Native bindings to the libgit2 library...

PT-2026-64886

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Buffer Over-read issue in Apache Thrift C++ bindings. The flaw occurs during a heap out-of-bounds read within the readHeaderFormat function of the THeaderTransport class. Recommendations Upgra...

PT-2026-64882

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Improper handling of highly compressed data leads to a data amplification issue in the C++, Java, Python, Go, D, and C/GLib bindings. This occurs within the TZlibTransport decompression proces...

PT-2026-64878

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description An infinite loop issue exists in the Python, Go, PHP, and Java bindings of Apache Thrift. This occurs due to a loop with an unreachable exit condition within the TCompactProtocol varint...

PT-2026-64884

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Inefficient Algorithmic Complexity and Allocation of Resources Without Limits or Throttling in Apache Thrift Node.js bindings. This issue can lead to a quadratic-time Denial of Service DoS in...

PT-2026-64885

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description An integer overflow or wraparound issue exists in the C++, c glib, Go, netstd, Delphi, and Haxe bindings. The flaw is located in the checkReadBytesAvailable function of the TProtocol class...

PT-2026-64892

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description An out-of-bounds read issue exists in the Apache Thrift C++ bindings due to improper validation of the specified quantity in the input. This occurs within the readString function of the...

PT-2026-64877

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Improper handling of highly compressed data, known as data amplification, exists in the Apache Thrift Python bindings. This issue occurs during unbounded Zlib decompression within the...

PT-2026-64883

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Improper handling of highly compressed data, known as data amplification, exists in the Apache Thrift Ruby bindings. This issue occurs during ZLIB decompression within the THeaderTransport...

PT-2026-64891

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description An allocation of resources without limits or throttling issue exists in the Apache Thrift Rust bindings. Specifically, the Rust binary protocol non-strict path lacks a string size limit, which...

PT-2026-64880

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Improper validation of certificates with host mismatch occurs in the Apache Thrift c glib bindings. This issue results in the TLS client failing to perform necessary hostname verification...

PT-2026-64890

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description An out-of-bounds read issue exists in the Apache Thrift c glib bindings, specifically occurring within the transport leftover-bytes path. An out-of-bounds read is a condition where a program...

PT-2026-64893

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Apache Thrift Python bindings contain an issue where certificates with host mismatches are not properly validated. Recommendations Upgrade to version 0.24.0...