https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T22:54:39.316470+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/brew-evernote-backup-cve-2026-41608 BREW-evernote-backup-CVE-2026-41608 — Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability 2026-09-28T22:54:39.394713+00:00

Affected: Homebrew: evernote-backup

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

 https://vulnerability.circl.lu/vuln/cve-2026-41608 CVE-2026-41608 — Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport 2026-09-28T22:54:39.394825+00:00

Affected: Apache Software Foundation Apache Thrift

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.

 https://vulnerability.circl.lu/vuln/ghsa-6pjx-3pjc-mrj8 GHSA-6pjx-3pjc-mrj8 — Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability 2026-09-28T22:54:39.394888+00:00

Affected: PyPI: thrift

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.