Non notée
CVE-2016-5397 The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an…
Description
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Thrift | Versions non publiées |
Autres CVE de Apache Thrift
Les 91 CVE de Apache Thrift →
CVE-2026-120135
Apache Thrift: Java TProtocolUtil.skip() does not limit the recursion depth by default
8.2
Élevée
CVE-2026-66054
Allocation of Resources Without Limits or Throttling, Improper Handling of Highly Compressed Data (Data Amplification)…
6.9
Moyenne
CVE-2026-61374
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings
7.1
Élevée
CVE-2026-63772
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings
8.7
Élevée