python3Packages.thrift
thrift 0.22.0 · pkgs/development/python-modules/thrift/default.nix
Health
Risk
risk 64 critical
- +60 3 open advisories
- +4 an OSV advisory has a 1% chance of exploitation in 30 days (EPSS)
Version
0.22.0 no newer release known to repology
Channels
Hydra
succeeded 10y ago
Advisories
GHSA-6pjx-3pjc-mrj8 high 7.5 EPSS 1.0% Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability (OSV, for this version)
CVE-2026-41608
GHSA-8wv5-x4w7-5gww high 8.7 EPSS 1.0% Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop (OSV, for this version)
CVE-2026-43871
GHSA-hwrj-9rr4-24xh medium EPSS 0.3% Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit (OSV, for this version)
CVE-2026-66053
Packaging
not read yet: the next index sweep reads it
Maintainers
Pull requests 1
thrift: 0.24.0 -> 0.25.0
#572901 by r-ryantm · opened 5d ago
Closed or merged in the synced window 2
thrift: enable structuredAttrs
#572962 by SFrijters · merged 4d ago
thrift: 0.22.0 -> 0.24.0
#514296 by r-ryantm · merged 3w ago
Issues 3
python3Packages.thrift: security issues < 0.25.0 1.severity: security
#569838 by nixpkgs-security-tracker · opened 13d ago · 0 comments
thrift: security issues < 0.25.0 1.severity: security
#569828 by nixpkgs-security-tracker · opened 13d ago · 0 comments
thrift: security issues < 0.24.0 1.severity: security
#546584 by nixpkgs-security-tracker · opened 2mo ago · 2 comments