VulnerableCode Package Details - pkg:pypi/thrift@0.13.0

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:pypi/thrift@0.13.0

Essentials

purl	pkg:pypi/thrift@0.13.0

Next non-vulnerable version	0.24.0
Latest non-vulnerable version	0.24.0
Risk score	3.9

Vulnerabilities affecting this package (3)

Advisory	Summary	Fixed in package version
PYSEC-2026-3926 Aliases: BIT-thrift-2026-43871 CVE-2026-43871 GHSA-8wv5-x4w7-5gww	Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability …	0.24.0 Not vulnerable
PYSEC-2026-3927 Aliases: BIT-thrift-2026-66053 CVE-2026-66053 GHSA-hwrj-9rr4-24xh	Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit Improper Validation of Certificate with Host …	0.24.0 Not vulnerable
PYSEC-2026-3925 Aliases: BIT-thrift-2026-41608 CVE-2026-41608 GHSA-6pjx-3pjc-mrj8	Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability Improper Handling of Highly Compressed …	0.24.0 Not vulnerable

This package is not known to fix any advisories.