PT-2026-104193
CVE-2026-94634
·
Published
2026-10-02
·
Updated
2026-10-09
Description by
CVSS 4.0
8.2
HighMetricsAV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Apache Thrift versions prior to 0.25.0
Description
The Apache Thrift Python bindings contain an issue where resources are allocated without limits or throttling and a resource is initialized with an insecure default.
Recommendations
Update to version 0.25.0.
Found an issue in the description? Have something to add? Feel free to write us 👾