CVE-2026-41636Published
Apache Thrift: Node.js skip() recursion
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-41636 · Microsoft / collected KEV context
cve-program · CVE-2026-41636
euvd · EUVD-2026-26026
nvd · CVE-2026-41636
- https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql
- http://www.openwall.com/lists/oss-security/2026/04/28/1
osv · GHSA-r67j-r569-jrwp
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.