Where
-Infinity
0

Trending

Last week
Last month
Last year

Apache ThriftAllocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. …

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2507439

Apache Thrift (Python bindings)Apache Thrift: Python TSSLSocket Hostname Matcher Import

Risk 38
Severity
5.9
Trending
Month
First published (updated )
CVE-2026-66053

Apache ThriftApache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass

Risk 70
Severity
8.7
Trending
Month
First published (updated )
CVE-2026-58662

Apache Apache ThriftApache Thrift: Rust binary protocol non-strict path missing string size limit

Risk 50
Severity
8.7
First published (updated )
CVE-2026-58389

Apache Thrift (C++ bindings)Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()

Risk 91
Severity
9.3
Trending
Month
First published (updated )
CVE-2026-55971
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache Apache ThriftApache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path

Risk 70
Severity
6.9
Trending
Month
First published (updated )
CVE-2026-58023

Apache ThriftApache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()

Risk 44
Severity
6.9
Trending
Month
First published (updated )
CVE-2026-55970

Apache ThriftApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()

Risk 50
Severity
8.7
Trending
Month
First published (updated )
CVE-2026-55969

Apache Apache ThriftApache Thrift: Node.js quadratic-time DoS in server receive transports

Risk 50
Severity
8.7
First published (updated )
CVE-2026-55968

Apache ThriftApache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb

Risk 46
Severity
7.5
First published (updated )
CVE-2026-49158
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache ThriftApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit

Risk 51
Severity
8.7
Trending
Month
First published (updated )
CVE-2026-48586

Apache Thrift (C++ bindings)Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass

Risk 46
Severity
8.2
Trending
Month
First published (updated )
CVE-2026-48145

Apache Apache ThriftApache Thrift: c_glib TLS Client Missing Hostname Verification

Risk 67
Severity
9.1
Trending
Month
First published (updated )
CVE-2026-48144

Apache Thrift Java bindingsApache Thrift: Unbounded Read Leading to Denial of Service

Risk 46
Severity
6.9
Trending
Month
First published (updated )
CVE-2026-45112

Apache ThriftApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit

Risk 50
Severity
8.7
Trending
Month
First published (updated )
CVE-2026-43871
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache Apache ThriftApache Thrift: Unbounded Zlib Decompression in Python THeaderTransport

Risk 46
Severity
7.5
Trending
Month
First published (updated )
CVE-2026-41608

oss-secCVE-2026-66053: Apache Thrift: Python TSSLSocket Hostname Matcher Import

First published (updated )
https://seclists.org/oss-sec/2026/q3/274

oss-secCVE-2026-58389: Apache Thrift: Rust binary protocol non-strict path missing string size limit

First published (updated )
https://seclists.org/oss-sec/2026/q3/272

oss-secCVE-2026-58023: Apache Thrift: c_glib heap out-of-bounds ad in transport leftover-bytes path

First published (updated )
https://seclists.org/oss-sec/2026/q3/270

oss-secCVE-2026-55971: Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()

First published (updated )
https://seclists.org/oss-sec/2026/q3/271
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-secCVE-2026-55970: Apache Thrift: C++ heap out-of-bounds ad in THeaderTransport::adHeaderFormat()

First published (updated )
https://seclists.org/oss-sec/2026/q3/269

oss-secCVE-2026-55968: Apache Thrift: Node.js quadratic-time DoS in server ceive transports

First published (updated )
https://seclists.org/oss-sec/2026/q3/267

oss-secCVE-2026-48586: Apache Thrift: TZlibTransport Decompssion Size Limit

First published (updated )
https://seclists.org/oss-sec/2026/q3/265

oss-secCVE-2026-48145: Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass

First published (updated )
https://seclists.org/oss-sec/2026/q3/264

oss-secCVE-2026-48144: Apache Thrift: c_glib TLS Client Missing Hostname Verification

First published (updated )
https://seclists.org/oss-sec/2026/q3/263
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-secCVE-2026-43871: Apache Thrift: TCompactProtocol varint byte-count limit

First published (updated )
https://seclists.org/oss-sec/2026/q3/261

oss-secCVE-2026-41608: Apache Thrift: Unbounded Zlib Decompssion in Python THeaderTransport

First published (updated )
https://seclists.org/oss-sec/2026/q3/260

Apache ThriftMemory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apac…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2466670

Apache ThriftPath Traversal

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2466671

Apache ThriftImproper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue af…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2466660
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203