CVE-2026-85493 - Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME)
CVE ID :CVE-2026-85493 Published : Oct. 2, 2026, 10:45 a.m. | 34 minutes ago Description :Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the...