Apache Thrift Java skip() lacks a recursion limit before 0.24.0
CVE-2026-120135 is CVSS 8.2 and can crash Java services; upgrade libthrift to 0.24.0.
Stories per day · 30 days
1 stories, newest first · one card per story
1 stories, newest first · one card per story
CVE-2026-120135 is CVSS 8.2 and can crash Java services; upgrade libthrift to 0.24.0.
Today 1K readers · 1.5K views · 1.1K reads · all time 159K views