https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 21:29:10 +0000 https://db.gcve.eu/vuln/bit-thrift-2026-61373 <p><strong>Affected:</strong> Bitnami: thrift</p> <p>Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: thrift</p> <p>Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> https://db.gcve.eu/vuln/bit-thrift-2026-61373 https://db.gcve.eu/vuln/fkie_cve-2026-61373 <p>Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> <p>Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> https://db.gcve.eu/vuln/fkie_cve-2026-61373 https://db.gcve.eu/vuln/ghsa-3fh5-v6fh-cvj7 <p>Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> <p>Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> https://db.gcve.eu/vuln/ghsa-3fh5-v6fh-cvj7 https://db.gcve.eu/vuln/msrc_cve-2026-61373 msrc_CVE-2026-61373 https://db.gcve.eu/vuln/msrc_cve-2026-61373 https://db.gcve.eu/vuln/rhsa-2026:84734 <p>Cohere North AI: Cohere North AI: Arbitrary user information overwrite via incorrect access control Cohere North AI: Cohere North AI: Information disclosure via improper Origin header validation Cohere North AI: Cohere North AI: Information Leak via WebSocket Endpoint urllib3: urllib3 Streaming API improperly handles highly compressed data python-transformers: python-transformers: Arbitrary code execution due to overridden trust_remote_code setting fast-uri: fast-uri: URI authority bypass due to improper delimiter handling undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite urllib3: urllib3: Denial of Service via decompression bomb bypass with Brotli support org.eclipse.parsson/parsson: Eclipse Parsson: Denial of Service via uncontrolled resource consumption in JSON parsing undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 form-data: form-data: Form field override via CRLF injection undici: undici: Denial…</p> <p>Cohere North AI: Cohere North AI: Arbitrary user information overwrite via incorrect access control Cohere North AI: Cohere North AI: Information disclosure via improper Origin header validation Cohere North AI: Cohere North AI: Information Leak via WebSocket Endpoint urllib3: urllib3 Streaming API improperly handles highly compressed data python-transformers: python-transformers: Arbitrary code execution due to overridden trust_remote_code setting fast-uri: fast-uri: URI authority bypass due to improper delimiter handling undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite urllib3: urllib3: Denial of Service via decompression bomb bypass with Brotli support org.eclipse.parsson/parsson: Eclipse Parsson: Denial of Service via uncontrolled resource consumption in JSON parsing undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 form-data: form-data: Form field override via CRLF injection undici: undici: Denial…</p> https://db.gcve.eu/vuln/rhsa-2026:84734 https://db.gcve.eu/vuln/ubuntu-cve-2026-61373 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libthrift-java, Ubuntu:18.04:LTS: libthrift-java, Ubuntu:22.04:LTS: libthrift-java, Ubuntu:24.04:LTS: libthrift-java, Ubuntu:26.10: libthrift-java, Ubuntu:26.04:LTS: libthrift-java</p> <p>Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libthrift-java, Ubuntu:18.04:LTS: libthrift-java, Ubuntu:22.04:LTS: libthrift-java, Ubuntu:24.04:LTS: libthrift-java, Ubuntu:26.10: libthrift-java, Ubuntu:26.04:LTS: libthrift-java</p> <p>Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-61373