Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize

Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize

Apache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries are present but do not match

Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op

Apache Thrift: Perl TLS client disables certificate verification by default

Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()

Apache Thrift: C++ JSON OOB read

Apache Thrift: C++ `TEvhttpServer` leaks its `RequestContext` when the processor throws before calling back

Apache Thrift: PHP `thrift_protocol` C extension ignores the configured `maxStringSize`

Apache Thrift: C++ WebSocket server transport does not read a full request length

Apache Thrift, Apache Thrift, Apache Thrift: A map key from the wire can replace a decoded object's prototype in generated JavaScript

Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end

Apache Thrift: Python TSSLSocket Hostname Matcher Import

Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Apache Thrift: c_glib dispatch stack overflow