Mmastodon TechnologyCybersecurity first seen 8 h ago, last 8 h ago, peak #6

High-severity vulnerability disclosed in Apache Thrift Lua bindings

Original: 🚨 EUVD-2026-91569 📊 Score: 8.2/10 (CVSS v3.1) 📦 Product: Apache Thrift 🏢 Vendor: Apache Software Foundation 📅 Updated: 2

A high-severity vulnerability, EUVD-2026-91569, has been catalogued affecting the Lua bindings of Apache Thrift, the cross-language RPC framework maintained by the Apache Software Foundation. The flaw, scored 8.2 out of 10 under CVSS v3.1, involves allocation of resources without limits or throttling combined with inefficient algorithmic complexity, which could allow denial-of-service conditions. The advisory was updated on 2 October 2026.

Why now: Organisations running Apache Thrift are checking whether the newly published 8.2-severity flaw affects their services.

Apache ThriftApache Software FoundationEUVD-2026-91569

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 8 h ago to 8 h ago.

Evidence

• 🚨 EUVD-2026-91569 📊 Score: 8.2/10 (CVSS v3.1) 📦 Product: Apache Thrift 🏢 Vendor: Apache Software Foundation 📅 Updated: 2026-10-02 📝 Allocation of resources without limits or throttling, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/742537