GHSA-r67j-r569-jrwp
NoneCVSS
—
EPSS
—
Published
Apr 28, 2026
CISA due date
—
The record
Apache Thrift Node.js bindings vulnerable to Uncontrolled Recursion
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | thrift | 0 | 0.23.0 |
Related vulnerabilities
- CVE-2026-41636 Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects… Same vulnerability
- GHSA-526f-jxpj-jmg2 Apache Thrift vulnerable to Path Traversal, HTTP Request/Response Splitting, Uncontrolled… Also affects thrift
- CVE-2026-43870 Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory… Also affects thrift
- CVE-2026-92822 A flaw was found in libmodulemd. CWE-674
- CVE-2026-112895 Pillow is a Python imaging library. CWE-674
- CVE-2026-100354 kin-openapi is a Go project for handling OpenAPI files. CWE-674
- CVE-2026-109267 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL… CWE-674
- CVE-2026-109264 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recursion in… CWE-674