https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 30 Oct 2026 17:34:58 +0000 https://db.gcve.eu/vuln/bit-thrift-2026-94636 <p><strong>Affected:</strong> Bitnami: thrift</p> <p>Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: thrift</p> <p>Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> https://db.gcve.eu/vuln/bit-thrift-2026-94636 https://db.gcve.eu/vuln/fkie_cve-2026-94636 <p>Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> <p>Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> https://db.gcve.eu/vuln/fkie_cve-2026-94636 https://db.gcve.eu/vuln/ghsa-25j2-4rc9-8hj6 <p>Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> <p>Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings.</p> <p>This issue affects Apache Thrift: before 0.25.0.</p> <p>Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> https://db.gcve.eu/vuln/ghsa-25j2-4rc9-8hj6 https://db.gcve.eu/vuln/msrc_cve-2026-94636 msrc_CVE-2026-94636 https://db.gcve.eu/vuln/msrc_cve-2026-94636 https://db.gcve.eu/vuln/rhsa-2026:74369 <p>thrift: thrift: Denial of Service via improper handling of compressed data thrift: thrift: Denial of Service via uncontrolled resource allocation thrift: thrift: Denial of Service via uninitialized pointer access in c_glib bindings thrift: thrift: Denial of Service via excessive resource allocation in Delphi buffered transport thrift: thrift: Denial of Service via buffer overflow in PHP bindings thrift: Apache Thrift: Denial of Service via deeply nested unknown fields thrift: thrift: Denial of Service via NULL pointer dereference in c_glib bindings thrift: thrift: Denial of Service via excessive memory allocation thrift: thrift: Denial of Service via integer underflow in THeaderTransport thrift: thrift: Denial of Service via excessive memory allocation in WebSocket transport thrift: thrift: Information disclosure via improper certificate validation in Perl bindings thrift: Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op thrift: thrift: Man-in-the-middle attacks via improper certificate validation thrift: Apache Thrift: c_glib `read_all` spins when the underlying read returns 0 thrift: Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end thrift: Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME) thrift: thrift: Denial of Service via improper message handling in language bindings thrift: thrift: Denial of Service via TJSONProtocol in Node.js bindings th…</p> <p>thrift: thrift: Denial of Service via improper handling of compressed data thrift: thrift: Denial of Service via uncontrolled resource allocation thrift: thrift: Denial of Service via uninitialized pointer access in c_glib bindings thrift: thrift: Denial of Service via excessive resource allocation in Delphi buffered transport thrift: thrift: Denial of Service via buffer overflow in PHP bindings thrift: Apache Thrift: Denial of Service via deeply nested unknown fields thrift: thrift: Denial of Service via NULL pointer dereference in c_glib bindings thrift: thrift: Denial of Service via excessive memory allocation thrift: thrift: Denial of Service via integer underflow in THeaderTransport thrift: thrift: Denial of Service via excessive memory allocation in WebSocket transport thrift: thrift: Information disclosure via improper certificate validation in Perl bindings thrift: Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op thrift: thrift: Man-in-the-middle attacks via improper certificate validation thrift: Apache Thrift: c_glib `read_all` spins when the underlying read returns 0 thrift: Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end thrift: Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME) thrift: thrift: Denial of Service via improper message handling in language bindings thrift: thrift: Denial of Service via TJSONProtocol in Node.js bindings th…</p> https://db.gcve.eu/vuln/rhsa-2026:74369 https://db.gcve.eu/vuln/ubuntu-cve-2026-94636 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: python-thrift, Ubuntu:18.04:LTS: python-thrift, Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:26.10: thrift, Ubuntu:26.04:LTS: thrift</p> <p>Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: python-thrift, Ubuntu:18.04:LTS: python-thrift, Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:26.10: thrift, Ubuntu:26.04:LTS: thrift</p> <p>Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-94636