[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1iopqJRJSPu6y1YYno0cIkp1g2F1Hxj-LJqHBtSp-GM":3,"g5a-ex:apache\u002Fthrift@*":131,"g5a-family:apache\u002Fthrift":133},{"success":4,"data":5},true,{"product":6,"versions":50,"topVulnerabilitiesByEpss":68,"kevVulnerabilities":108,"seoMetadata":109,"meta":128},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":49},"apache","thrift",17,7,0,"2021-02-12",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.10.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"0.11.0",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"0.12.0",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"0.13.0",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.0",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.0",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.0",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.0",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.0",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.1",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.0",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"0.8.0",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.0",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.1",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.2",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.3",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.3.1","Thrift by Apache is a technology product with 17 tracked versions and 7 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},[69,77,82,89,93,97,104],{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":74,"severity":75,"isKev":16,"epssScore":76},"CVE-2019-0205","In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings.","2019-10-29",7.5,"v3.1","High",0.09082,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":73,"cvssVersion":74,"severity":75,"isKev":16,"epssScore":81},"CVE-2018-1320","Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.","2019-01-07",0.08188,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"cvssVersion":87,"severity":75,"isKev":16,"epssScore":88},"CVE-2016-5397","The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0.","2018-02-12",8.8,"v3.0",0.07061,{"cveId":90,"description":91,"publishedDate":72,"cvssScore":73,"cvssVersion":74,"severity":75,"isKev":16,"epssScore":92},"CVE-2019-0210","In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.",0.06793,{"cveId":94,"description":95,"publishedDate":12,"cvssScore":73,"cvssVersion":74,"severity":75,"isKev":16,"epssScore":96},"CVE-2020-13949","In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.",0.06779,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":101,"cvssVersion":87,"severity":102,"isKev":16,"epssScore":103},"CVE-2015-3254","The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service (infinite recursion) via vectors involving the skip function.","2017-06-16",6.5,"Medium",0.05335,{"cveId":105,"description":106,"publishedDate":80,"cvssScore":101,"cvssVersion":87,"severity":102,"isKev":16,"epssScore":107},"CVE-2018-11798","The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.",0.04875,[],{"title":110,"metaDescription":111,"keywords":112,"structuredData":113},"Thrift by Apache - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Thrift by Apache covering 17 versions with 7 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Thrift vulnerabilities, Thrift security, Thrift CVE, Apache Thrift, Thrift threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":114,"@type":115,"name":116,"description":111,"url":117,"manufacturer":118,"applicationCategory":122,"softwareVersion":123,"mainEntity":124},"https:\u002F\u002Fschema.org","SoftwareApplication","Thrift","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Fthrift",{"@type":119,"name":120,"url":121},"Organization","Apache","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fapache","Security Software","17 versions tracked",{"@type":125,"name":126,"description":127,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Thrift Security Vulnerabilities","Security vulnerabilities affecting Thrift by Apache",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":129,"apiVersion":130},"2026-10-28T15:02:36.868Z","3.0",{"rows":132,"total":11,"capped":16,"failed":11},[],[]]