https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T21:29:09.738106+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/bit-thrift-2026-61373 BIT-thrift-2026-61373 — Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation 2026-10-20T21:29:10.156969+00:00

Affected: Bitnami: thrift

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer.

This issue affects Apache Thrift: before 0.25.0.

Users are recommended to upgrade to version 0.25.0, which fixes the issue.

 https://db.gcve.eu/vuln/fkie_cve-2026-61373 fkie_cve-2026-61373 2026-10-20T21:29:10.157035+00:00

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer.

This issue affects Apache Thrift: before 0.25.0.

Users are recommended to upgrade to version 0.25.0, which fixes the issue.

 https://db.gcve.eu/vuln/ghsa-3fh5-v6fh-cvj7 GHSA-3fh5-v6fh-cvj7 2026-10-20T21:29:10.157066+00:00

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer.

This issue affects Apache Thrift: before 0.25.0.

Users are recommended to upgrade to version 0.25.0, which fixes the issue.

 https://db.gcve.eu/vuln/msrc_cve-2026-61373 msrc_CVE-2026-61373 — Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation 2026-10-20T21:29:10.157084+00:00 msrc_CVE-2026-61373 https://db.gcve.eu/vuln/rhsa-2026:84734 RHSA-2026:84734 — Red Hat Security Advisory: RHOAI 3.4.5 - Red Hat OpenShift AI 2026-10-20T21:29:10.157103+00:00

Cohere North AI: Cohere North AI: Arbitrary user information overwrite via incorrect access control Cohere North AI: Cohere North AI: Information disclosure via improper Origin header validation Cohere North AI: Cohere North AI: Information Leak via WebSocket Endpoint urllib3: urllib3 Streaming API improperly handles highly compressed data python-transformers: python-transformers: Arbitrary code execution due to overridden trust_remote_code setting fast-uri: fast-uri: URI authority bypass due to improper delimiter handling undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite urllib3: urllib3: Denial of Service via decompression bomb bypass with Brotli support org.eclipse.parsson/parsson: Eclipse Parsson: Denial of Service via uncontrolled resource consumption in JSON parsing undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 form-data: form-data: Form field override via CRLF injection undici: undici: Denial…

 https://db.gcve.eu/vuln/ubuntu-cve-2026-61373 UBUNTU-CVE-2026-61373 2026-10-20T21:29:10.157692+00:00

Affected: Ubuntu:16.04:LTS: libthrift-java, Ubuntu:18.04:LTS: libthrift-java, Ubuntu:22.04:LTS: libthrift-java, Ubuntu:24.04:LTS: libthrift-java, Ubuntu:26.10: libthrift-java, Ubuntu:26.04:LTS: libthrift-java

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.