An Inefficient Algorithmic Complexity vulnerability exists in the Apache Thrift Perl bindings affecting versions before 0.25.0. This issue can lead to high resource consumption under certain conditions. The vulnerability is addressed in Apache Thrift version 0.25.0, which users are recommended to upgrade to.
An allocation of resources without limits or throttling vulnerability exists in the Apache Thrift Go bindings affecting versions before 0.25.0. This flaw allows excessive resource consumption, potentially leading to denial of service conditions. The issue is resolved in Apache Thrift version 0.25.0. Users should upgrade to this version to mitigate the vulnerability.
An Allocation of Resources Without Limits or Throttling vulnerability exists in the Apache Thrift Delphi bindings buffered transport. This affects Apache Thrift versions before 0.25.0. The vulnerability allows resource allocation without proper limits or throttling, potentially leading to resource exhaustion. Users are advised to upgrade to version 0.25.0, which addresses this issue.
Apache Thrift versions prior to 0.25.0 in the Node.js and D language bindings have a vulnerability where the WebSocket server transports improperly handle the payload length parameter. This leads to memory allocation with an excessive size value, allowing a small frame to cause large memory allocations (up to 513 MiB in Node.js and 2 GiB in D). The Node.js server keeps the connection open, enabling repeated exploitation. The issue is fixed in version 0.25.0.
An infinite loop vulnerability exists in the Apache Thrift c_glib bindings, caused by a loop with an unreachable exit condition. This affects versions prior to 0.25.0. The issue is resolved in version 0.25.0, which users are advised to upgrade to.
An integer underflow and out-of-bounds write vulnerability exists in the Apache Thrift C++ 32-bit THeaderTransport component. This vulnerability affects Apache Thrift versions before 0.25.0. The issue can lead to memory corruption due to improper handling of integer values. Users are advised to upgrade to version 0.25.0, which addresses this vulnerability.
Apache Thrift C++ and D libraries improperly validate TLS certificates when subjectAltName entries do not match the host, falling back to the Common Name (CN) for validation. This behavior violates RFC 6125 and RFC 9525, allowing acceptance of certificates with mismatched subjectAltName but matching CN. Exploitation requires an attacker with a certificate chaining to a trusted CA and matching the connected host's CN, mainly a concern for private PKI deployments. Affected versions include C++ library 0.7.0 through 0.24.0 and D library 0.9.0 through 0.24.0. Users should upgrade to version 0.25.0.
A prototype pollution vulnerability exists in Apache Thrift's JavaScript bindings before version 0.25.0. This flaw allows improper modification of object prototype attributes, which can lead to unexpected behavior in applications using affected versions. The issue is resolved by upgrading to version 0.25.0 and regenerating JavaScript code.
A NULL pointer dereference vulnerability exists in the Apache Thrift PHP bindings affecting versions before 0.25.0. This flaw can cause the affected software to crash or behave unexpectedly. The issue is resolved in Apache Thrift version 0.25.0, which users are advised to upgrade to.
An inefficient regular expression and algorithmic complexity vulnerability exists in Apache Thrift Lua bindings affecting versions before 0.25.0. This issue can cause performance degradation or denial of service due to resource exhaustion. The vulnerability is fixed in version 0.25.0. Users should upgrade to this version to mitigate the risk.
A heap-based buffer overflow vulnerability exists in Apache Thrift C++ THeaderTransport when the ZLIB transform is enabled for frames. The transform function copies compressed frames into a buffer without verifying size, leading to overflow if the data grows under compression. This affects Apache Thrift versions before 0.25.0. Upgrading to version 0.25.0 resolves the issue.
A vulnerability in 389-ds-base allows an on-path attacker to inject a crafted LDAP message during StartTLS negotiation. The server does not discard plaintext bytes buffered from the client, leading to messageID collisions. This can cause a client to treat a failed authentication attempt as successful.
CVE-2026-61812 is a medium severity vulnerability in modsecurity-apache where the HTML decoder is missing certain entities, which can lead to evasion of security controls.
CVE-2026-61813 is a vulnerability in modsecurity-apache involving a weak libcurl TLS hostname verification setting when fetching over HTTPS. This weakness could potentially allow improper validation of TLS hostnames during HTTPS requests. The issue affects multiple specific versions of modsecurity-apache. No CVSS score is provided, and no known exploits in the wild have been reported.
A vulnerability in ModSecurity allows response body inspection to be bypassed when the Content-Type header uses non-canonical casing. This affects specific ModSecurity versions and could reduce the effectiveness of security rules that rely on inspecting response bodies.
A vulnerability in ModSecurity's XML request body processor causes it to dereference an uninitialized parser context pointer. This issue affects multiple specific versions of ModSecurity and is classified as medium severity. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches.
CVE-2026-91148 is a medium severity vulnerability affecting multiple specific versions of the Cockpit software. The exact nature and technical details of the vulnerability are unknown based on the provided information. There is no CVSS score or detailed description available. No known exploits in the wild have been reported. The affected versions are explicitly listed, covering a broad range of Cockpit releases. No patch or remediation information is provided, and the vulnerability does not pertain to a cloud service. No geographic targeting is indicated.
CVE-2026-102966 is a medium severity vulnerability affecting multiple specific versions of MediaWiki. The exact nature of the vulnerability is unknown based on the provided data. There is no CVSS score or detailed technical description available. No known exploits in the wild have been reported. No patch or remediation information is provided, and the affected versions are explicitly listed. The vulnerability impacts various Ubuntu-packaged versions of MediaWiki.
CVE-2026-102967 is a medium severity vulnerability affecting multiple specific versions of MediaWiki. The exact nature and technical details of the vulnerability are unknown based on the provided data. There is no CVSS score or detailed description available. No known exploits are reported in the wild. The affected versions include various releases from 1:1.27.3-1 through 1:1.43.9+dfsg-1ubuntu1 and related builds. No patch or remediation information is provided, and the product is not a cloud service.
CVE-2026-102968 is a medium severity vulnerability affecting multiple specific versions of MediaWiki. The exact nature of the vulnerability is unknown as no detailed description or technical details are provided. There is no CVSS score available, and no known exploits in the wild have been reported. The affected versions are explicitly listed, but no patch or remediation information is provided.