GHSA-8wv5-x4w7-5gwwHighCVSS 7.5

Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop

Published
July 27, 2026
Last Modified
September 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-43871 →

📋 Description

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

🎯 Affected products4

  • pip/thrift:< 0.24.0
  • go/github.com/apache/thrift:< 0.24.0
  • composer/apache/thrift:< 0.24.0
  • maven/org.apache.thrift:libthrift:< 0.24.0

🔗 References (5)