CVE ID :CVE-2026-94657 Published : Oct. 2, 2026, 1:18 p.m. | 2 hours, 2 minutes ago Description :Allocation of resources without limits or throttling vulnerability in Apache Thrift JavaME bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-94657 - Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound

VERWANDTEARTIKEL

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

CVE-2026-104851 - fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

CVE-2026-94483 - Next.js: Server-Side Request Forgery in Image Optimization

CVE-2026-104846 - Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940)

CVE-2026-104847 - ProseMirror: XSS vulnerability in prosemirror-view's paste handling

CVE-2026-103648 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloader