thrift has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 6.7 (medium).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 6.7
Publish → KEV: —
Last 90 days: 2 prev 0

Products

thrift 2

Follow thrift:RSS feed Save a search →Embed badge ↗

2

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-41608High· 7.5Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability41
CVE-2026-66053Medium· 5.9Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit32

thrift vulnerabilities

CVEs affecting thrift, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-66053Medium· 5.9

Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit

Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit

▾ Sunlitthrift · thriftEPSS 0.21%via OSV

CVE-2026-41608High· 7.5

Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability

Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability

▾ Twilightthrift · thriftEPSS 0.58%via OSV

thrift vulnerabilities (CVEs) · VulnSea