PT-2026-104296
CVE-2026-94636
·
تاريخ النشر
2026-10-02
·
تاريخ التحديث
2026-10-09
الوصف من
CVSS 4.0
8.2
عاليةالمقاييسAV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Apache Thrift versions prior to 0.25.0
Description
The Apache Thrift Python bindings contain an issue involving the improper handling of highly compressed data, which can lead to data amplification. This occurs due to improper validation of the specified quantity in the input and function calls made with incorrectly specified arguments.
Recommendations
Upgrade to version 0.25.0.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾