CVE-2026-94422 high xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-96289 high thrift: Apache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-96287 high thrift: Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic) since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-96286 high thrift: Apache Thrift: Perl servers end `serve()` when serving one connection fails since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-96277 high thrift: thrift: Denial of Service via uncaught exception in Ruby bindings since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-94658 high thrift: thrift: Denial of Service via inefficient algorithmic complexity in Lua bindings since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-94657 high thrift: thrift: Denial of Service via improper resource allocation in JavaME bindings since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-94656 high thrift: Apache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size bound since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-94655 high thrift: Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-94654 high thrift: thrift: Denial of Service via infinite loop in Python bindings since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-85476 high thrift: Apache Thrift: c_glib `read_all` spins when the underlying read returns 0 since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-83745 high thrift: thrift: Denial of Service via excessive memory allocation in WebSocket transport since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-83663 high github.com/apache/thrift: Apache Thrift: Denial of Service via unbounded recursion in Go transports since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-66859 high thrift: thrift: Denial of Service via NULL pointer dereference in c_glib bindings since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-66858 high thrift: Apache Thrift: Denial of Service via deeply nested unknown fields since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-66837 high thrift: thrift: Denial of Service via buffer overflow in PHP bindings since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-66081 high thrift: thrift: Denial of Service via uninitialized pointer access in c_glib bindings since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-66055 high thrift: thrift: Denial of Service via uncontrolled resource allocation since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-66054 high thrift: thrift: Denial of Service via improper handling of compressed data since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-63772 high github.com/apache/thrift: Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-61374 high Allocation of Resources Without Limits or Throttling vulnerability in ... since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-96294 high thrift: Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-96292 high thrift: thrift: Denial of Service via inefficient regular expression evaluation in Lua bindings since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-96288 high thrift: Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory) since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-94653 high thrift: Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic) since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-94648 high thrift: Apache Thrift: dart `TJsonProtocol`/`TJSONProtocol` has no string size bound since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-94646 high thrift: thrift: Denial of Service via prototype pollution in Node.js bindings since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-94637 high github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of compressed data since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-94636 high thrift: Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-90440 high thrift: thrift: Denial of Service via improper exception handling in TNonblockingServer since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-87117 high thrift: Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-86537 high thrift: thrift: Denial of Service via infinite loop in D language bindings since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-86535 high thrift: thrift: Denial of Service via TJSONProtocol in Node.js bindings since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-85088 high thrift: thrift: Man-in-the-middle attacks via improper certificate validation since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-85087 high thrift: Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-85086 high thrift: thrift: Information disclosure via improper certificate validation in Perl bindings since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-82459 high thrift: thrift: Denial of Service via integer underflow in THeaderTransport since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-82458 high thrift: thrift: Denial of Service via excessive memory allocation since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-61373 high org.apache.thrift/libthrift: Apache Thrift: Denial of Service via unbounded resource allocation in TSaslNonblockingServer since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-104418 high Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation Files since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-104416 high Ghost 4.39.0 before 6.64.0 Invite Token Disclosure via Admin API since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-104414 high Ghost from 2.5.0 before 6.64.0 Stored XSS via oEmbed Photo Responses since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-104413 high Ghost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Images since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-104411 high Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-96990 high thrift: Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-94651 high improper handling of exceptional conditions, Missing release of resour ... since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-94650 high thrift: thrift: Denial of Service via uncontrolled recursion in C GLib bindings since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-94645 high thrift: Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-94644 high apache/thrift: thrift: Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-94642 high Uncaught exception vulnerability in Apache Thrift PHP bindings. Thi ... since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 