← All credits

The ASF — found using Claude agents to study the security of open-source projects, validated and reported by Apache Thrift.

2 vulnerability records and advisories credit this contributor.

CVE-2026-85088
Apache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries are present but do not match
CVE-2026-85087
Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op