CVE-2026-41636

Опубликовано: 28 апр. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings

This issue affects Apache Thrift: before 0.23.0.

Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Ссылки

https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql
Mailing List
Patch
Release Notes
http://www.openwall.com/lists/oss-security/2026/04/28/1
Mailing List

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:thrift:*:*:*:*:*:node.js:*:*

Версия до 0.23.0 (исключая)

EPSS

Процентиль: 37%

0.00451

Низкий

7.5 High

CVSS3

Дефекты

CWE-674

Связанные уязвимости

CVE-2026-41636

CVSS3: 7.5

ubuntu

3 месяца назад

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

CVE-2026-41636

CVSS3: 7.5

redhat

3 месяца назад

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

CVE-2026-41636

msrc

3 месяца назад

Apache Thrift: Node.js skip() recursion

CVE-2026-41636

CVSS3: 7.5

debian

3 месяца назад

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings ...

GHSA-r67j-r569-jrwp

github

3 месяца назад

Apache Thrift Node.js bindings vulnerable to Uncontrolled Recursion

EPSS

Процентиль: 37%

0.00451

Низкий

7.5 High

CVSS3

Дефекты

CWE-674