Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.thrift/libthrift@0.23.0
purl pkg:maven/org.apache.thrift/libthrift@0.23.0
Next non-vulnerable version 0.24.0
Latest non-vulnerable version 0.24.0
Risk score 3.9
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-8wv5-x4w7-5gww
Aliases:
CVE-2026-43871
Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability …
0.24.0
Not vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-7pwc-h2j2-rjgj
Apache Thrift has an Improper Validation of Certificate with Host Mismatch Vulnerability Improper Validation of Certificate with Host Mismatch vulnerability … CVE-2026-43869
GHSA-gf47-qgg5-9g9q
Apache Thrift has an issue with Java TSSLTransportFactory hostname verification Improper Validation of Certificate with Host Mismatch vulnerability in Apache … CVE-2026-41603