Threats Tagged 'ghsa-3c88-xfrx-v3f7'

1 threat

Threats Tagged 'ghsa-3c88-xfrx-v3f7'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.2%	CVE-2026-85087Apache Thrift · Improper certificate validation Medium6.9EPSS 0.2%2026-10-02CVE Database V5CVE-2026-85087 CVE-2026-85087 is a medium severity vulnerability in Apache Thrift's Python bindings involving improper certificate validation and incorrect status code returns. This flaw affects versions before 0.25.0. The issue is resolved in Apache Thrift version 0.25.0. Users are advised to upgrade to this fixed version to mitigate the vulnerability. EPSS 0.2%Vulnerability Apache Software Foundation #cwe-295 #cwe-393 #ghsa-3c88-xfrx-v3f7	CVE Database V5	2026-10-02

Showing 1–1 of 1 result