Apache Thrift (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-10-29. Vendor: Apache.

CVEs of Apache Thrift

• CVE-2019-0210 - CVSS 7.5 (high), 2019-10-29: In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.
• CVE-2019-0205 - CVSS 7.5 (high), 2019-10-29: In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the…