search
Apache Thrift
Trends
- 1High-severity infinite loop flaw reported in Apache Thrift Python bindingsโผ๐จ EUVD-2026-91568 ๐ Score: 8.2/10 (CVSS v3.1) ๐ฆ Product: Apache Thrift ๐ข Vendor: Apache Software Foundation ๐ Updated: 2
A vulnerability tracked as EUVD-2026-91568 has been disclosed in Apache Thrift, the Apache Software Foundation's cross-language RPC framework. The flaw, an infinite loop with an unreachable exit condition in the Python bindings, carries a CVSS v3.1 score of 8.2. Details on affected versions remain incomplete pending an update from the vendor.
- 2High-severity vulnerability disclosed in Apache Thrift Lua bindingsโผ๐จ EUVD-2026-91569 ๐ Score: 8.2/10 (CVSS v3.1) ๐ฆ Product: Apache Thrift ๐ข Vendor: Apache Software Foundation ๐ Updated: 2
A high-severity vulnerability, EUVD-2026-91569, has been catalogued affecting the Lua bindings of Apache Thrift, the cross-language RPC framework maintained by the Apache Software Foundation. The flaw, scored 8.2 out of 10 under CVSS v3.1, involves allocation of resources without limits or throttling combined with inefficient algorithmic complexity, which could allow denial-of-service conditions. The advisory was updated on 2 October 2026.
- 3High-severity vulnerability disclosed in Apache Thrift Lua libraryโ๐จ EUVD-2026-91330 ๐ Score: 8.7/10 (CVSS v3.1) ๐ฆ Product: Apache Thrift ๐ข Vendor: Apache Software Foundation ๐ Updated: 2
A vulnerability tracked as EUVD-2026-91330 has been catalogued affecting the Lua component of Apache Thrift, the open-source RPC framework maintained by the Apache Software Foundation. The flaw, scored 8.7 out of 10 under CVSS v3.1, involves allocation of resources without limits or throttling and improper handling of length parameter inconsistency, which could enable denial-of-service conditions.