{"vulnerability": "cve-2026-94635", "sightings": [{"uuid": "f13c283d-de31-44ac-9351-78f9edc1d81f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94635", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwv2vng7zz2m", "content": "CVE-2026-94635 affects Apache Thrift by the Apache Software Foundation. A missing length check in its Lua bindings lets a network request trigger unbounded memory allocation and denial of service. Versions before 0.25.0 are affected. Upgrade to 0.25.0.", "creation_timestamp": "2026-10-02T09:32:50.058921Z"}]}