Allocation of Resources Without Limits or Throttling

Overview thrift is a Python bindings package for Apache Thrift. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the readJSONString and readJSONNumericChars methods of TJSONProtocol, which accumulate a value byte by byte without counting ...