[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1iopqJRJSPu6y1YYno0cIkp1g2F1Hxj-LJqHBtSp-GM":3,"g5a-ex:apache\u002Fthrift@*":147,"g5a-family:apache\u002Fthrift":149},{"success":4,"data":5},true,{"product":6,"versions":50,"topVulnerabilitiesByEpss":68,"kevVulnerabilities":124,"seoMetadata":125,"meta":144},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":49},"apache","thrift",17,7,0,"2021-02-12",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.10.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"0.11.0",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"0.12.0",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"0.13.0",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.0",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.0",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.0",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.0",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.0",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.1",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.0",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"0.8.0",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.0",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.1",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.2",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.3",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.3.1","Thrift by Apache is a technology product with 17 tracked versions and 7 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},[69,77,82,89,93,97,104,108,113,120],{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":74,"severity":75,"isKev":16,"epssScore":76},"CVE-2019-0205","In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings.","2019-10-29",7.5,"v3.1","High",0.09156,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":73,"cvssVersion":74,"severity":75,"isKev":16,"epssScore":81},"CVE-2018-1320","Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.","2019-01-07",0.08188,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"cvssVersion":87,"severity":75,"isKev":16,"epssScore":88},"CVE-2016-5397","The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0.","2018-02-12",8.8,"v3.0",0.06873,{"cveId":90,"description":91,"publishedDate":12,"cvssScore":73,"cvssVersion":74,"severity":75,"isKev":16,"epssScore":92},"CVE-2020-13949","In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.",0.06779,{"cveId":94,"description":95,"publishedDate":72,"cvssScore":73,"cvssVersion":74,"severity":75,"isKev":16,"epssScore":96},"CVE-2019-0210","In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.",0.06531,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":101,"cvssVersion":87,"severity":102,"isKev":16,"epssScore":103},"CVE-2015-3254","The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service (infinite recursion) via vectors involving the skip function.","2017-06-16",6.5,"Medium",0.05335,{"cveId":105,"description":106,"publishedDate":80,"cvssScore":101,"cvssVersion":87,"severity":102,"isKev":16,"epssScore":107},"CVE-2018-11798","The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.",0.04915,{"cveId":109,"description":110,"publishedDate":111,"cvssScore":73,"cvssVersion":74,"severity":75,"isKev":16,"epssScore":112},"CVE-2025-48431","Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings.\n\nThis issue affects Apache Thrift: before 0.23.0.\n\nUsers are recommended to upgrade to version 0.23.0, which fixes the issue.\n\nDescription: Specially crafted requests can crash an c_glib-based Thrift server with a clean but fatal \"free(): invalid pointer\" error message.","2026-04-28",0.01079,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":117,"cvssVersion":118,"severity":75,"isKev":16,"epssScore":119},"CVE-2026-58662","Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings.\n\nThis issue affects Apache Thrift: before 0.24.0.\n\nUsers are recommended to upgrade to version 0.24.0, which fixes the issue.","2026-07-27",8.7,"v4.0",0.01078,{"cveId":121,"description":122,"publishedDate":116,"cvssScore":117,"cvssVersion":118,"severity":75,"isKev":16,"epssScore":123},"CVE-2026-43871","Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0.\n\nUsers are recommended to upgrade to version 0.24.0, which fixes the issue.",0.0103,[],{"title":126,"metaDescription":127,"keywords":128,"structuredData":129},"Thrift by Apache - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Thrift by Apache covering 17 versions with 7 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Thrift vulnerabilities, Thrift security, Thrift CVE, Apache Thrift, Thrift threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":130,"@type":131,"name":132,"description":127,"url":133,"manufacturer":134,"applicationCategory":138,"softwareVersion":139,"mainEntity":140},"https:\u002F\u002Fschema.org","SoftwareApplication","Thrift","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Fthrift",{"@type":135,"name":136,"url":137},"Organization","Apache","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fapache","Security Software","17 versions tracked",{"@type":141,"name":142,"description":143,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Thrift Security Vulnerabilities","Security vulnerabilities affecting Thrift by Apache",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":145,"apiVersion":146},"2026-10-17T13:07:05.368Z","3.0",{"rows":148,"total":11,"capped":16,"failed":11},[],[]]