apache_thrift vulnerabilities

CVEs whose affected-version data names the apache_thrift package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-41636High· 8.7

6mo ago

Apache Thrift: Node.js skip() recursion

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

▾ TwilightApache Software Foundation · Apache ThriftEPSS 0.45%via CVEORG