Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how apache compares to other vendors in security performance

View Risk Score →

Software

apache http server
465
apache tomcat
236
apache airflow
193
apache superset
101
apache ofbiz
97
apache activemq
93
apache traffic server
86
apache openoffice
75
apache camel
74
apache cxf
69
apache struts 2
61
apache nifi
57
apache thrift
50
apache solr
49
apache cloudstack
46
apache dolphinscheduler
44
apache inlong
44
apache struts
43
apache iotdb
42
apache tika
38
apache apisix
37
apache hadoop
37
apache answer
33
apache ambari
32
apache openmeetings
32
apache syncope
31
apache fineract
29
apache shiro
29
apache ranger
28
apache wicket
27
apache zeppelin
27
apache kylin
26
apache log4j
26
apache nimble
26
apache archiva
24
apache jspwiki
24
apache linkis
24
apache apache airflow
23
apache kafka
23
apache spark
23
apache james
22
apache streampark
22
apache pulsar
21
apache qpid
20
apache activemq broker
19
apache cassandra
19
apache couchdb
19
apache geode
19
apache activemq all
18
apache apache camel
18

oss-secApache Thrift: Python TSSLSocket Hostname Matcher Import

First published (updated )
CVE-2026-66053

oss-secApache Thrift: C++ THeaderTransport::adString() info-header length bounds bypass

First published (updated )
CVE-2026-58662

oss-secApache Thrift: Rust binary protocol non-strict path missing string size limit

First published (updated )
CVE-2026-58389

oss-secApache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()

First published (updated )
CVE-2026-55971

oss-secApache Thrift: c_glib heap out-of-bounds ad in transport leftover-bytes path

First published (updated )
CVE-2026-58023
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-secApache Thrift: C++ heap out-of-bounds ad in THeaderTransport::adHeaderFormat()

First published (updated )
CVE-2026-55970

oss-secApache Thrift: integer overflow in TProtocol::checkadBytesAvailable()

First published (updated )
CVE-2026-55969

oss-secApache Thrift: Node.js quadratic-time DoS in server ceive transports

First published (updated )
CVE-2026-55968

oss-secApache Thrift: Ruby THeaderTransport ZLIB Decompssion Bomb

First published (updated )
CVE-2026-49158

oss-secApache Thrift: TZlibTransport Decompssion Size Limit

First published (updated )
CVE-2026-48586
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-secApache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass

First published (updated )
CVE-2026-48145

oss-secApache Thrift: c_glib TLS Client Missing Hostname Verification

First published (updated )
CVE-2026-48144

oss-secApache Thrift: Unbounded ad Leading to Denial of Service

First published (updated )
CVE-2026-45112

oss-secApache Thrift: TCompactProtocol varint byte-count limit

First published (updated )
CVE-2026-43871

oss-secApache Thrift: Unbounded Zlib Decompssion in Python THeaderTransport

First published (updated )
CVE-2026-41608
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-secCVE-2026-66053: Apache Thrift: Python TSSLSocket Hostname Matcher Import

First published (updated )
https://seclists.org/oss-sec/2026/q3/274

oss-secCVE-2026-58662: Apache Thrift: C++ THeaderTransport::adString() info-header length bounds bypass

First published (updated )
https://seclists.org/oss-sec/2026/q3/273

oss-secCVE-2026-58389: Apache Thrift: Rust binary protocol non-strict path missing string size limit

First published (updated )
https://seclists.org/oss-sec/2026/q3/272

oss-secCVE-2026-58023: Apache Thrift: c_glib heap out-of-bounds ad in transport leftover-bytes path

First published (updated )
https://seclists.org/oss-sec/2026/q3/270

oss-secCVE-2026-55971: Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()

First published (updated )
https://seclists.org/oss-sec/2026/q3/271
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-secCVE-2026-55970: Apache Thrift: C++ heap out-of-bounds ad in THeaderTransport::adHeaderFormat()

First published (updated )
https://seclists.org/oss-sec/2026/q3/269

oss-secCVE-2026-55969: Apache Thrift: integer overflow in TProtocol::checkadBytesAvailable()

First published (updated )
https://seclists.org/oss-sec/2026/q3/268

oss-secCVE-2026-55968: Apache Thrift: Node.js quadratic-time DoS in server ceive transports

First published (updated )
https://seclists.org/oss-sec/2026/q3/267

oss-secCVE-2026-49158: Apache Thrift: Ruby THeaderTransport ZLIB Decompssion Bomb

First published (updated )
https://seclists.org/oss-sec/2026/q3/266

oss-secCVE-2026-48586: Apache Thrift: TZlibTransport Decompssion Size Limit

First published (updated )
https://seclists.org/oss-sec/2026/q3/265
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-secCVE-2026-48145: Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass

First published (updated )
https://seclists.org/oss-sec/2026/q3/264

oss-secCVE-2026-48144: Apache Thrift: c_glib TLS Client Missing Hostname Verification

First published (updated )
https://seclists.org/oss-sec/2026/q3/263

oss-secCVE-2026-45112: Apache Thrift: Unbounded ad Leading to Denial of Service

First published (updated )
https://seclists.org/oss-sec/2026/q3/262

oss-secCVE-2026-43871: Apache Thrift: TCompactProtocol varint byte-count limit

First published (updated )
https://seclists.org/oss-sec/2026/q3/261

oss-secCVE-2026-41608: Apache Thrift: Unbounded Zlib Decompssion in Python THeaderTransport

First published (updated )
https://seclists.org/oss-sec/2026/q3/260
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203