TH
Product
Thrift
32
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 21Medium 7Low 0
Watch
Add Thrift to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-55970 | 6.5 | Jul 27 | Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat() Affected: before 0.24.0 |
| CVE-2026-41607 | 6.5 | Apr 28 | Apache Thrift: C++ JSON OOB read Affected: before 0.23.0 |
| CVE-2018-11798 | 6.5 | Jan 7 | The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to… Affected: 0.9.2 through 0.11.0 |
| CVE-2015-3254 | 6.5 | Jun 16 | The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service (infinite recursion) via vectors involving the skip function Affected: through 0.9.2 |
| CVE-2026-66053 | 5.9 | Jul 27 | Apache Thrift: Python TSSLSocket Hostname Matcher Import Affected: before 0.24.0 |
| CVE-2026-43868 | 5.3 | May 5 | Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern Affected: before 0.23.0 |
| CVE-2026-41606 | 5.3 | Apr 28 | Apache Thrift: c_glib dispatch stack overflow Affected: before 0.23.0 |
Showing 7