REDHAT-BUG-2507439: High severity Apache Thrift vulnerability

Published Jul 27, 2026

Updated

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings.

This issue affects Apache Thrift: from 0.19.0 before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

Affected Software

1 affected component

Apache Thrift>0.19.0<0.24.0

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Apache Thrift (Java bindings) to a version that resolves this vulnerability.
Fixed in 0.24.0

Jul 27, 2026

Data Sourced

via Red Hat·12:01 PM

DescriptionSeverityAffected Software

The severity of REDHAT-BUG-2507439 is classified as high with a score of 7.

To fix REDHAT-BUG-2507439, users should upgrade to Apache Thrift version 0.24.0.

REDHAT-BUG-2507439 affects the Apache Thrift Java bindings.

Apache Thrift versions from 0.19.0 up to, but not including, 0.24.0 are affected by REDHAT-BUG-2507439.

REDHAT-BUG-2507439 is an allocation of resources without limits or throttling vulnerability.