Search for packages
| purl | pkg:maven/org.apache.thrift/libthrift@0.12.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-g2fg-mr77-6vrm
Aliases: CVE-2020-13949 |
Uncontrolled Resource Consumption in Apache Thrift In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which … |
Vulnerable |
|
GHSA-rj7p-rfgp-852x
Aliases: CVE-2019-0205 |
Loop with Unreachable Exit Condition in Apache Thrift In Apache Thrift all versions up to and including 0.12.0, a server … |
Vulnerable |
|
GHSA-7pwc-h2j2-rjgj
Aliases: CVE-2026-43869 |
Apache Thrift has an Improper Validation of Certificate with Host Mismatch Vulnerability Improper Validation of Certificate with Host Mismatch vulnerability … |
Vulnerable |
|
CVE-2019-0210
|
Out-of-bounds Read In Apache Thrift, a server implemented in Go using `TJSONProtocol` or `TSimpleJSONProtocol` may panic when feed with invalid … |
Vulnerable |
|
GHSA-8wv5-x4w7-5gww
Aliases: CVE-2026-43871 |
Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability … |
Not vulnerable |
|
GHSA-gf47-qgg5-9g9q
Aliases: CVE-2026-41603 |
Apache Thrift has an issue with Java TSSLTransportFactory hostname verification Improper Validation of Certificate with Host Mismatch vulnerability in Apache … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2018-1320
|
Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An … | |
|
GHSA-wjxj-f8rg-99wx
|
Improper Input Validation in Apache Thrift Apache Thrift Java client library versions 0.5.0 prior to 0.9.3-1 and 0.10.0 prior to … |
CVE-2018-1320
|
|
CVE-2018-1320
|
Improper Input Validation An Apache Thrift Java client library can bypass SASL negotiation validation in the `org.apache.thrift.transport.TSaslTransport` class. | |
|
GHSA-vx85-mj8c-4qm6
|
Apache Thrift Node.js static web server sandbox escape The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 … |
CVE-2018-11798
|