Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.thrift/libthrift@0.5.0
purl pkg:maven/org.apache.thrift/libthrift@0.5.0
Tags Ghost
Next non-vulnerable version 0.24.0
Latest non-vulnerable version 0.24.0
Risk score 3.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-wjxj-f8rg-99wx
Aliases:
CVE-2018-1320
Improper Input Validation in Apache Thrift Apache Thrift Java client library versions 0.5.0 prior to 0.9.3-1 and 0.10.0 prior to …
0.9.3-1
Vulnerable
CVE-2018-1320

Improper Input Validation An Apache Thrift Java client library can bypass SASL negotiation validation in the `org.apache.thrift.transport.TSaslTransport` class.
0.12.0
Vulnerable
This package is not known to fix any advisories.