Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/thrift@0.14.0
purl pkg:pypi/thrift@0.14.0
Next non-vulnerable version 0.24.0
Latest non-vulnerable version 0.24.0
Risk score 3.9
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
PYSEC-2026-3926
Aliases:
BIT-thrift-2026-43871
CVE-2026-43871
GHSA-8wv5-x4w7-5gww
Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability …
0.24.0
Not vulnerable
PYSEC-2026-3927
Aliases:
BIT-thrift-2026-66053
CVE-2026-66053
GHSA-hwrj-9rr4-24xh
Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit Improper Validation of Certificate with Host …
0.24.0
Not vulnerable
PYSEC-2026-3925
Aliases:
BIT-thrift-2026-41608
CVE-2026-41608
GHSA-6pjx-3pjc-mrj8
Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability Improper Handling of Highly Compressed …
0.24.0
Not vulnerable
This package is not known to fix any advisories.