CVE-2026-94646 in Thriftinformação

Sumário

de MITRE • 02/10/2026

Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift nodejs bindings.



This issue affects Apache Thrift: before 0.25.0.



Users are recommended to upgrade to version 0.25.0, which fixes the issue.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Divulgação

02/10/2026

Moderação

aceite

Entrada

VDB-412899

EPSS

0.00000

KEV

não

Atividades

muito baixo

Fontes

Interested in the pricing of exploits?

See the underground prices here!