Apache Thrift Java skip() lacks a recursion limit before 0.24.0
CVE-2026-120135 is CVSS 8.2 and can crash Java services; upgrade libthrift to 0.24.0.
52
CVE-2026-120135 is CVSS 8.2 and can crash Java services; upgrade libthrift to 0.24.0.
Apache Thrift 0.25.0 fixes 61 vulnerabilities; users should upgrade from all earlier versions.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 840 readers · 1.1K views · 843 reads · all time 159K views