Apache Thrift Node.js bindings prior to version 0.23.0 contain an Uncontrolled Recursion vulnerability. This flaw can lead to high-impact issues such as denial of service. The vulnerability is addressed in version 0.23.0, which users are advised to upgrade to.