What is GHSA-25j2-4rc9-8hj6?

GHSA-25j2-4rc9-8hj6 is a security advisory published by GitHub Security Advisories with High severity. Improper handling of highly compressed data (data amplification), Function call with incorrectly...

Which CVE IDs does GHSA-25j2-4rc9-8hj6 cover?

GHSA-25j2-4rc9-8hj6 covers the following CVE IDs: CVE-2026-94636. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-25j2-4rc9-8hj6High

Improper handling of highly compressed data (data amplification), Function call with incorrectly...

Vendor

GitHub Security Advisories

Published

October 2, 2026

Last Modified

October 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-94636 →

📋 Description

Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings.

This issue affects Apache Thrift: before 0.25.0.

Users are recommended to upgrade to version 0.25.0, which fixes the issue.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-94636
https://lists.apache.org/thread/1rpq0d0g6yzjjzl1z27lwmvhzkn6rbrs
https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1
https://github.com/advisories/GHSA-25j2-4rc9-8hj6