Search for packages
| purl | pkg:maven/org.apache.thrift/libthrift@0.8.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2018-1320
|
Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An … |
Vulnerable Vulnerable |
|
GHSA-rj7p-rfgp-852x
Aliases: CVE-2019-0205 |
Loop with Unreachable Exit Condition in Apache Thrift In Apache Thrift all versions up to and including 0.12.0, a server … |
Vulnerable |
|
GHSA-wjxj-f8rg-99wx
Aliases: CVE-2018-1320 |
Improper Input Validation in Apache Thrift Apache Thrift Java client library versions 0.5.0 prior to 0.9.3-1 and 0.10.0 prior to … |
Vulnerable |
|
GHSA-7pwc-h2j2-rjgj
Aliases: CVE-2026-43869 |
Apache Thrift has an Improper Validation of Certificate with Host Mismatch Vulnerability Improper Validation of Certificate with Host Mismatch vulnerability … |
Vulnerable |
|
CVE-2018-1320
|
Improper Input Validation An Apache Thrift Java client library can bypass SASL negotiation validation in the `org.apache.thrift.transport.TSaslTransport` class. |
Vulnerable |
|
CVE-2015-3254
|
Improper Input Validation The client libraries in Apache Thrift might allow remote authenticated users to cause a denial of service … |
Vulnerable |
|
GHSA-8wv5-x4w7-5gww
Aliases: CVE-2026-43871 |
Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability … |
Not vulnerable |
|
GHSA-gf47-qgg5-9g9q
Aliases: CVE-2026-41603 |
Apache Thrift has an issue with Java TSSLTransportFactory hostname verification Improper Validation of Certificate with Host Mismatch vulnerability in Apache … |
Vulnerable |