libthrift-0_25_0-0.25.0-1.1 on GA media (moderate)

libthrift-0250-0.25.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:12051-1 Rating: moderate Cross-References: CVE-2026-82458 CVE-2026-82459 CVE-2026-85086 CVE-2026-85483 CVE-2026-85493 CVE-2026-85494 CVE-2026-86537 CVE-2026-91135 CVE-2026-91137 CVE-2026-93925 CVE-2026-93926 CVE-2026-94633...

OPENSUSE-SU-2026:12051-1 libthrift-0_25_0-0.25.0-1.1 on GA media

These are all security issues fixed in the libthrift-0250-0.25.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-105760

These are all security issues fixed in the libthrift-0 25 0-0.25.0-1.1 package on the GA media of openSUSE Tumbleweed...

Allocation of Resources Without Limits or Throttling

Overview org.apache.thrift:libthrift is a lightweight, language-independent software stack with an associated code generation mechanism for point-to-point RPC. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the readJSONString and...

ai.chatur:cortex-core (>=0.0.1, <=0.1.4), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +6589 more potentially affected by CVE-2026-94651 via org.apache.thrift:libthrift (>=0.6.1, <=0.24.0)

org.apache.thrift:libthrift MAVEN version =0.6.1, =0.0.1, =0.0.1, =0.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-de...

Allocation of Resources Without Limits or Throttling

Overview org.apache.thrift:libthrift is a lightweight, language-independent software stack with an associated code generation mechanism for point-to-point RPC. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the lack of limits on SAS...

ai.chatur:cortex-core (>=0.0.1, <=0.1.4), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +6589 more potentially affected by CVE-2026-61373 via org.apache.thrift:libthrift (>=0.6.1, <=0.24.0)

org.apache.thrift:libthrift MAVEN version =0.6.1, =0.0.1, =0.0.1, =0.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-de...

Allocation of Resources Without Limits or Throttling

Overview org.apache.thrift:libthrift is a lightweight, language-independent software stack with an associated code generation mechanism for point-to-point RPC. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling inadequate restriction of memory...

ai.chatur:cortex-core (>=0.0.1, <=0.1.4), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +6589 more potentially affected by CVE-2026-94639 via org.apache.thrift:libthrift (>=0.6.1, <=0.24.0)

org.apache.thrift:libthrift MAVEN version =0.6.1, =0.0.1, =0.0.1, =0.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-de...

ai.chatur:cortex-core (>=0.0.1, <=0.1.4), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +2224 more potentially affected by CVE-2026-94651 via org.apache.thrift:libthrift (>=0.14.0, <=0.24.0)

org.apache.thrift:libthrift MAVEN version =0.14.0, =0.0.1, =0.0.1, =0.0.1, =3.10.0.5, =6.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =5.0.1, =1.2.0, =1.2.0, =2.0.0 - be.ugent.solidlab:shapeshift 0.0.1 and more Source cves: CVE-2026-94651 Source advisory: MEND:CVE-2026-94651...

ai.chatur:cortex-core (>=0.0.1, <=0.1.4), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +2224 more potentially affected by CVE-2026-94639 via org.apache.thrift:libthrift (>=0.14.0, <=0.24.0)

org.apache.thrift:libthrift MAVEN version =0.14.0, =0.0.1, =0.0.1, =0.0.1, =3.10.0.5, =6.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =5.0.1, =1.2.0, =1.2.0, =2.0.0 - be.ugent.solidlab:shapeshift 0.0.1 and more Source cves: CVE-2026-94639 Source advisory: MEND:CVE-2026-94639...

OPENSUSE-SU-2026:11432-1 libthrift-0_24_0-0.24.0-1.1 on GA media

These are all security issues fixed in the libthrift-0240-0.24.0-1.1 package on the GA media of openSUSE Tumbleweed...

Infinite loop

Overview org.apache.thrift:libthrift is a lightweight, language-independent software stack with an associated code generation mechanism for point-to-point RPC. Affected versions of this package are vulnerable to Infinite loop in TCompactProtocol varint decoding, which reads continuation bytes...

ai.chatur:cortex-core (>=0.0.1, <=0.1.4), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +6581 more potentially affected by CVE-2026-43871 via org.apache.thrift:libthrift (>=0.6.1, <=0.23.0)

org.apache.thrift:libthrift MAVEN version =0.6.1, =0.0.1, =0.0.1, =0.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-de...

ai.chatur:cortex-core (>=0.0.1, <=0.1.4), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +6581 more potentially affected by CVE-2026-43871 via org.apache.thrift:libthrift (>=0.6.1, <=0.23.0)

org.apache.thrift:libthrift MAVEN version =0.6.1, =0.0.1, =0.0.1, =0.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-de...

ai.chatur:cortex-core (>=0.0.1, <=0.1.4), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +6581 more potentially affected by CVE-2026-48586 via org.apache.thrift:libthrift (>=0.6.1, <=0.23.0)

org.apache.thrift:libthrift MAVEN version =0.6.1, =0.0.1, =0.0.1, =0.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-de...

ai.chatur:cortex-core (>=0.0.1, <=0.1.4), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +1063 more potentially affected by CVE-2026-45112 via org.apache.thrift:libthrift (>=0.19.0, <=0.23.0)

org.apache.thrift:libthrift MAVEN version =0.19.0, =0.0.1, =0.0.1, =0.0.1, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =5.0.1, =2.0.0, =2.4.2 - be.vlaanderen.informatievlaanderen.ldes.client:event-stream-properties-fetcher 2.12.0 - be.vlaanderen.informatievlaanderen.ldes.client:ldes-client 2.12.0 -...

libthrift-0_23_0-0.23.0-1.1 on GA media (moderate)

libthrift-0230-0.23.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10685-1 Rating: moderate Cross-References: CVE-2026-41602 CVE-2026-41604 CVE-2026-41605 CVE-2026-41606 CVE-2026-41607 CVE-2026-41636 CVSS scores: CVE-2026-41602 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...

ai.chatur:cortex-core (>=0.0.1, <=0.1.4), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +6558 more potentially affected by CVE-2026-43869 via org.apache.thrift:libthrift (>=0.6.1, <=0.22.0)

org.apache.thrift:libthrift MAVEN version =0.6.1, =0.0.1, =0.0.1, =0.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-de...

ai.chatur:cortex-core (>=0.0.1, <=0.1.4), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +6558 more potentially affected by CVE-2026-43869 via org.apache.thrift:libthrift (>=0.6.1, <=0.22.0)

org.apache.thrift:libthrift MAVEN version =0.6.1, =0.0.1, =0.0.1, =0.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-de...