Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r276-xrw4-gpgm

Опубликовано: 02 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.7

Описание

Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings.

This issue affects Apache Thrift: before 0.25.0.

Users are recommended to upgrade to version 0.25.0, which fixes the issue.

Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings.

This issue affects Apache Thrift: before 0.25.0.

Users are recommended to upgrade to version 0.25.0, which fixes the issue.

EPSS

Процентиль: 35%
0.00426
Низкий

8.7 High

CVSS4

Дефекты

CWE-770

Связанные уязвимости

ubuntu
12 дней назад

Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

nvd
12 дней назад

Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

msrc
7 дней назад

Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements

debian
12 дней назад

Improper validation of specified quantity in input, Allocation of reso ...

EPSS

Процентиль: 35%
0.00426
Низкий

8.7 High

CVSS4

Дефекты

CWE-770