Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.thrift/libthrift@0.13.0
purl pkg:maven/org.apache.thrift/libthrift@0.13.0
Next non-vulnerable version 0.24.0
Latest non-vulnerable version 0.24.0
Risk score 3.9
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-g2fg-mr77-6vrm
Aliases:
CVE-2020-13949
Uncontrolled Resource Consumption in Apache Thrift In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which …
0.14.0
Vulnerable
GHSA-7pwc-h2j2-rjgj
Aliases:
CVE-2026-43869
Apache Thrift has an Improper Validation of Certificate with Host Mismatch Vulnerability Improper Validation of Certificate with Host Mismatch vulnerability …
0.23.0
Vulnerable
GHSA-8wv5-x4w7-5gww
Aliases:
CVE-2026-43871
Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability …
0.24.0
Not vulnerable
GHSA-gf47-qgg5-9g9q
Aliases:
CVE-2026-41603
Apache Thrift has an issue with Java TSSLTransportFactory hostname verification Improper Validation of Certificate with Host Mismatch vulnerability in Apache …
0.23.0
Vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-rj7p-rfgp-852x
Loop with Unreachable Exit Condition in Apache Thrift In Apache Thrift all versions up to and including 0.12.0, a server … CVE-2019-0205
CVE-2019-0210
Out-of-bounds Read In Apache Thrift, a server implemented in Go using `TJSONProtocol` or `TSimpleJSONProtocol` may panic when feed with invalid …