Vulnerabilities for thrift

First version without a known vulnerability: 0.24.0

Details

• GHSA-hwrj-9rr4-24xh2026-07-27

  Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit

  Fixed in: 0.24.0

• GHSA-6pjx-3pjc-mrj82026-07-27

  Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability

  Fixed in: 0.24.0

• GHSA-8wv5-x4w7-5gww2026-07-27

  Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop

  Fixed in: 0.24.0