Apache Thrift Java skip() lacks a recursion limit before 0.24.0
CVE-2026-120135 is CVSS 8.2 and can crash Java services; upgrade libthrift to 0.24.0.
52
CVE-2026-120135 is CVSS 8.2 and can crash Java services; upgrade libthrift to 0.24.0.
Today 1K readers · 1.5K views · 1.1K reads · all time 159K views