thrift
PyPI
ECOSYSTEM · introduced 0 → fixed 0.24.0
17 explicitly affected versions
0.10.0, 0.11.0, 0.13.0, 0.14.0, 0.14.1, 0.14.2, 0.15.0, 0.16.0, 0.20.0, 0.21.0, 0.22.0, 0.23.0, 0.8.0, 0.9.0, 0.9.1, 0.9.2, 0.9.3
GHSA-8wv5-x4w7-5gwwPublished
Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop
Exact source revision recorded 24 Oct 2026 13:19:41 UTC. It does not establish the source's current position. Latest evidence.
osv · GHSA-8wv5-x4w7-5gww
Publishedgithub.com/apache/thrift
Go
SEMVER · introduced 0 → fixed 0.24.0
apache/thrift
Packagist
ECOSYSTEM · introduced 0 → fixed 0.24.0
21 explicitly affected versions
0.10.0, 0.11.0, 0.9.0, 0.9.2, 0.9.3, 0.9.3.1, v0.12.0, v0.13.0, v0.14.0, v0.14.1, v0.14.2, v0.15.0, v0.16.0, v0.17.0, v0.18.0, v0.18.1, v0.19.0, v0.20.0, v0.21.0, v0.22.0, v0.23.0
org.apache.thrift:libthrift
Maven
ECOSYSTEM · introduced 0 → fixed 0.24.0
25 explicitly affected versions
0.10.0, 0.11.0, 0.12.0, 0.13.0, 0.14.0, 0.14.1, 0.14.2, 0.15.0, 0.16.0, 0.17.0, 0.18.0, 0.18.1, 0.19.0, 0.20.0, 0.21.0, 0.22.0, 0.23.0, 0.6.1, 0.7.0, 0.8.0, 0.9.0, 0.9.1, 0.9.2, 0.9.3, 0.9.3-1