CVE-2026-94646 in Thrift
Sumário
de MITRE • 02/10/2026
Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift nodejs bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to version 0.25.0, which fixes the issue.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.