« List of all vendors

Apache Software Foundation

List of Opam related CVEs (22 found)

CVE-2026-43868 – Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern
5/5/2026
Affected packages: thrift
Medium severity
CVE-2026-43868 – Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern
5/5/2026
Affected packages: thrift
Medium severity
CVE-2026-43870 – Apache Thrift: Node.js web_server.js multi-vulnerability
5/5/2026
Affected packages: thrift
High severity
CVE-2026-43870 – Apache Thrift: Node.js web_server.js multi-vulnerability
5/5/2026
Affected packages: thrift
High severity
CVE-2026-43869 – Apache Thrift: TSSLTransportFactory.java hostname verification
5/5/2026
Affected packages: thrift
High severity
CVE-2026-43869 – Apache Thrift: TSSLTransportFactory.java hostname verification
5/5/2026
Affected packages: thrift
High severity
CVE-2026-41636 – Apache Thrift: Node.js skip() recursion
4/28/2026
Affected packages: thrift
High severity
CVE-2026-41607 – Apache Thrift: C++ JSON OOB read
4/28/2026
Affected packages: thrift
Medium severity
CVE-2026-41606 – Apache Thrift: c_glib dispatch stack overflow
4/28/2026
Affected packages: thrift
Medium severity
CVE-2026-41605 – Apache Thrift: Swift Compact Protocol integer overflow
4/28/2026
Affected packages: thrift
High severity
CVE-2026-41604 – Apache Thrift: Swift Range crash in skip()
4/28/2026
Affected packages: thrift
High severity
CVE-2026-41603 – Apache Thrift: Java TSSLTransportFactory hostname verification
4/28/2026
Affected packages: thrift
High severity
CVE-2026-41602 – Apache Thrift: Go TFramedTransport uint32 overflow
4/28/2026
Affected packages: thrift
High severity
CVE-2025-48431 – Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.
4/28/2026
Affected packages: thrift
High severity
CVE-2022-34169 – Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets
7/19/2022
Affected packages: conf-openjdk
High severity
CVE-2022-34169 – Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets
7/19/2022
Affected packages: conf-openjdk
High severity
CVE-2018-1320
1/7/2019
Affected packages: thrift
Unknown severity
CVE-2018-11798
1/7/2019
Affected packages: thrift
Unknown severity
CVE-2018-11798
1/7/2019
Affected packages: thrift
Unknown severity
CVE-2018-1320
1/7/2019
Affected packages: thrift
Unknown severity