« List of all vendors

Apache Software Foundation

List of Opam related CVEs (29 found)

CVE-2026-43868 – Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern
5/5/2026
Affected packages: thrift
Medium severity
CVE-2026-43868 – Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern
5/5/2026
Affected packages: thrift
Medium severity
CVE-2026-43870 – Apache Thrift: Node.js web_server.js multi-vulnerability
5/5/2026
Affected packages: thrift
High severity
CVE-2026-43870 – Apache Thrift: Node.js web_server.js multi-vulnerability
5/5/2026
Affected packages: thrift
High severity
CVE-2026-43869 – Apache Thrift: TSSLTransportFactory.java hostname verification
5/5/2026
Affected packages: thrift
High severity
CVE-2026-43869 – Apache Thrift: TSSLTransportFactory.java hostname verification
5/5/2026
Affected packages: thrift
High severity
CVE-2026-41636 – Apache Thrift: Node.js skip() recursion
4/28/2026
Affected packages: thrift
High severity
CVE-2026-41607 – Apache Thrift: C++ JSON OOB read
4/28/2026
Affected packages: thrift
Medium severity
CVE-2026-41607 – Apache Thrift: C++ JSON OOB read
4/28/2026
Affected packages: thrift
Medium severity
CVE-2026-41606 – Apache Thrift: c_glib dispatch stack overflow
4/28/2026
Affected packages: thrift
Medium severity
CVE-2026-41606 – Apache Thrift: c_glib dispatch stack overflow
4/28/2026
Affected packages: thrift
Medium severity
CVE-2026-41605 – Apache Thrift: Swift Compact Protocol integer overflow
4/28/2026
Affected packages: thrift
High severity
CVE-2026-41605 – Apache Thrift: Swift Compact Protocol integer overflow
4/28/2026
Affected packages: thrift
High severity
CVE-2026-41604 – Apache Thrift: Swift Range crash in skip()
4/28/2026
Affected packages: thrift
High severity
CVE-2026-41604 – Apache Thrift: Swift Range crash in skip()
4/28/2026
Affected packages: thrift
High severity
CVE-2026-41603 – Apache Thrift: Java TSSLTransportFactory hostname verification
4/28/2026
Affected packages: thrift
High severity
CVE-2026-41603 – Apache Thrift: Java TSSLTransportFactory hostname verification
4/28/2026
Affected packages: thrift
High severity
CVE-2026-41602 – Apache Thrift: Go TFramedTransport uint32 overflow
4/28/2026
Affected packages: thrift
High severity
CVE-2026-41602 – Apache Thrift: Go TFramedTransport uint32 overflow
4/28/2026
Affected packages: thrift
High severity
CVE-2025-48431 – Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.
4/28/2026
Affected packages: thrift
High severity