~ / search / GHSA-r67j-r569-jrwp

GHSA-r67j-r569-jrwp

Apache Thrift Node.js bindings vulnerable to Uncontrolled Recursion

Source: GitHub Advisory Database (reviewed) High CVE-2026-41636

Packages

EcosystemPackageAffectedFixed in
npm thrift < 0.23.0 0.23.0

Details

As written in the advisory (Markdown source, shown as plain text).

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

References

External links from the advisory. They lead to third-party sites.