GHSA-jq7p-26h5-w78r
GitHub Security Advisory
Out-of-bounds read in Apache Thrift
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.
Affected Packages
Go
github.com/apache/thrift
Affected versions:
0.9.3
(fixed in 0.13.0)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: September 15, 2025 6:32 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.