Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.thrift/libthrift@0.14.0
purl pkg:maven/org.apache.thrift/libthrift@0.14.0
Next non-vulnerable version 0.24.0
Latest non-vulnerable version 0.24.0
Risk score 3.9
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-7pwc-h2j2-rjgj
Aliases:
CVE-2026-43869
Apache Thrift has an Improper Validation of Certificate with Host Mismatch Vulnerability Improper Validation of Certificate with Host Mismatch vulnerability …
0.23.0
Vulnerable
GHSA-8wv5-x4w7-5gww
Aliases:
CVE-2026-43871
Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability …
0.24.0
Not vulnerable
GHSA-gf47-qgg5-9g9q
Aliases:
CVE-2026-41603
Apache Thrift has an issue with Java TSSLTransportFactory hostname verification Improper Validation of Certificate with Host Mismatch vulnerability in Apache …
0.23.0
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-g2fg-mr77-6vrm
Uncontrolled Resource Consumption in Apache Thrift In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which … CVE-2020-13949