PkgSeer

Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
thrift Apache Thrift has a Memory Allocation with Excessive Size Value Vulnerability Medium Risk 5.3 6 months ago 4 hours ago
thrift Unbounded memory allocation in `thrift` binary protocol `read_bytes` High Risk 7.5 4 hours ago 4 hours ago
org.apache.thrift:libthrift Apache Thrift has an issue with Java TSSLTransportFactory hostname verification High Risk 7.4 6 months ago 4 days ago
evenote-thrift Malicious code in evenote-thrift (RubyGems) Unknown 1 year ago 1 month ago
thrift Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop High Risk 7.5 3 months ago 1 month ago
org.apache.thrift:libthrift Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop High Risk 7.5 3 months ago 1 month ago
apache/thrift Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop High Risk 7.5 3 months ago 1 month ago
github.com/apache/thrift Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop High Risk 7.5 3 months ago 1 month ago
thrift Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop High Risk 7.5 1 month ago 1 month ago
thrift Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit Medium Risk 5.9 3 months ago 1 month ago
thrift Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit Medium Risk 5.9 1 month ago 1 month ago
thrift Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability High Risk 7.5 3 months ago 1 month ago
thrift Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability High Risk 7.5 1 month ago 1 month ago
github.com/apache/thrift Apache Thrift TFramedTransport Go language implementation has an Integer Overflow or Wraparound vulnerability High Risk 7.5 6 months ago 1 month ago
thrift Apache Thrift Node.js bindings vulnerable to Uncontrolled Recursion High Risk 8.0 6 months ago 1 month ago
org.apache.thrift:libthrift Apache Thrift has an Improper Validation of Certificate with Host Mismatch Vulnerability High Risk 7.3 6 months ago 1 month ago
thrift Apache Thrift vulnerable to Path Traversal, HTTP Request/Response Splitting, Uncontrolled Resource Consumption High Risk 7.3 6 months ago 1 month ago
github.com/facebook/fbthrift Golang Facebook Thrift servers vulnerable to denial of service High Risk 7.5 4 years ago 1 month ago
org.apache.thrift:libthrift Loop with Unreachable Exit Condition in Apache Thrift High Risk 7.5 4 years ago 1 month ago
github.com/apache/thrift Apache Thrift Go Library Command Injection High Risk 8.8 4 years ago 1 month ago
github.com/facebook/fbthrift Improper Input Validation and Excessive Iteration in Go Facebook Thrift High Risk 7.5 4 years ago 1 month ago
github.com/apache/thrift Out-of-bounds read in Apache Thrift High Risk 7.5 5 years ago 1 month ago
org.apache.thrift:libthrift Uncontrolled Resource Consumption in Apache Thrift High Risk 7.5 5 years ago 1 month ago
org.apache.thrift:libthrift Apache Thrift Node.js static web server sandbox escape Medium Risk 6.5 7 years ago 1 month ago
org.apache.thrift:libthrift Improper Input Validation in Apache Thrift High Risk 7.5 7 years ago 1 month ago
chalk-thrift Malicious code in chalk-thrift (RubyGems) Unknown 10 months ago 3 months ago
github.com/apache/thrift Panic due to out-of-bounds read in github.com/apache/thrift Unknown 5 years ago 4 months ago
en-thrift-internal Malicious code in en-thrift-internal (npm) Unknown 8 months ago 8 months ago
github.com/facebook/fbthrift Denial of service via malicious message size declaration in github.com/facebook/fbthrift Unknown 5 years ago 9 months ago
github.com/facebook/fbthrift Denial of service via ignored unknown fields in github.com/facebook/fbthrift Unknown 5 years ago 9 months ago
rs-thrift2ts-win32-x64-msvc Malicious code in rs-thrift2ts-win32-x64-msvc (npm) Unknown 1 year ago 1 year ago
org.apache.spark:spark-hive-thriftserver_2.11 Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails Medium Risk 5.9 1 year ago 1 year ago
org.apache.spark:spark-hive-thriftserver_2.12 Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails Medium Risk 5.9 1 year ago 1 year ago
evernote-thrift Malicious code in evernote-thrift (npm) Unknown 1 year ago 1 year ago
org.apache.hbase:hbase-thrift Race condition in org.apache.hbase:hbase-thrift High Risk 8.1 8 years ago 2 years ago
thrift-services Malicious code in thrift-services (npm) Unknown 4 years ago 2 years ago
@thrift-api/drivertrade-web Malicious code in @thrift-api/drivertrade-web (npm) Unknown 4 years ago 2 years ago
@thrift-api/request Malicious code in @thrift-api/request (npm) Unknown 4 years ago 2 years ago
Data courtesy of OSV.dev
Page 1