Apache Thrift up to 0.22.0 Java TSSLTransportFactory certificate host validation 🚫 [False Positive]

Noticeinfo

⚠️ Further analysis revealed that this issues is a false-positive. Please take a look at the sources mentioned and consider not using this entry at all.

Productinfo

Vendor

• Apache

Name

• Thrift

Version

• 0.1
• 0.2
• 0.3
• 0.4
• 0.5
• 0.6
• 0.7
• 0.8
• 0.9
• 0.10
• 0.11
• 0.12
• 0.13
• 0.14
• 0.15
• 0.16
• 0.17
• 0.18
• 0.19
• 0.20
• 0.21
• 0.22.0

License

• open-source

Website

• Vendor: https://www.apache.org/

Timelineinfo

04/28/2026 Advisory disclosed
04/28/2026 +0 days VulDB entry created
07/28/2026 +91 days VulDB entry last update

Sourcesinfo

Vendor: apache.org

Advisory: lists.apache.org
False Positive: Yes

CVE: CVE-2026-41603 (🔒)
GCVE (CVE): GCVE-0-2026-41603
GCVE (VulDB): GCVE-100-359909
CERT Bund: WID-SEC-2026-1415 - Red Hat OpenShift Tempo (Apache Thrift): Mehrere Schwachstellen

Entryinfo

Created: 04/28/2026 06:51
Updated: 07/28/2026 18:02
Changes: 04/28/2026 06:51 (54), 05/10/2026 21:01 (7), 07/02/2026 11:38 (12), 07/28/2026 18:02 (3)
Complete: 🔍
Cache ID: 216::103

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion

Do you need the next level of professionalism?

Upgrade your account now!