CVE-2026-120135 - Apache Thrift: Java TProtocolUtil.skip() does not limit the recursion depth by default
CVE ID :CVE-2026-120135 Published : Oct. 31, 2026, 9:16 p.m. | 44 minutes ago Description :Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue. ...