Known Vulnerabilities for Apache Thrift by Apache Software Foundation
Listed below are 10 of the newest known vulnerabilities associated with "Apache Thrift" by "Apache Software Foundation".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-84179 json | Description getTopologyPageInfo merged the Nimbus daemon configuration with the topology's own configuration and returned ... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-82433 json | Description `getNimbusConf` returned the complete daemon configuration without redaction after only a user-level authorizati... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-82432 json | Description Nimbus validated `topology.blobstore.map` against the calling subject at submission time only. The rebalance ope... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-82426 json | Description Nimbus accepted the `uploadedJarLocation` argument of `submitTopology` / `submitTopologyWithOpts` as a server-si... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-66053 json | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apa... | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-58662 json | Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. This iss... | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-58389 json | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings. This issue affects Apache... | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-58023 json | Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users a... | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-55971 json | Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Us... | Not Provided | 2026-07-27 | 2026-07-28 |
| CVE-2026-55970 json | Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are re... | Not Provided | 2026-07-27 | 2026-07-27 |