CVE-2026-54150

next-video (Mux's Next.js video library) versions prior to 2.8.1 contain an unauthenticated path traversal in the GET handler exported from next-video/request-handler (commonly mounted at /api/video). The url query parameter is checked only for an https?:// prefix; any other value is treated as a...

CVE-2026-41607 Apache Thrift: C++ JSON OOB read

Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

CVE-2026-41607

CVE-2026-41607 : The connected documents confirm an out-of-bounds read vulnerability in Apache Thrift, affecting Thrift versions before 0.23.0. The mitigation is to upgrade to 0.23.0 or later, as specified in multiple sources. The vulnerability affects the Thrift implementation and is described c...