Apache Thrift Node.js bindings vulnerable to Uncontrolled Recursion

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2026-41636 · ADVISORY
• apache/thrift · PACKAGE
• lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql · WEB
• openwall.com/lists/oss-security/2026/04/28/1 · WEB

thrift のその他の脆弱性

• CVE-2026-66053中 5.9Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: bef…
• CVE-2026-58662緊急 9.1Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. This issue affects Apac…
• CVE-2026-58389高 7.5Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings. This issue affects Apache Thrift: before…
• CVE-2026-58023緊急 9.1Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended …
• CVE-2026-55971緊急 9.8Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recomme…