GitHub Advisoryadvisory · PyPI

GHSA-6pjx-3pjc-mrj8 Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability

HIGH Published 2026-07-27 Modified 2026-09-01 Official page ↗
Aliases
CVE-2026-41608
Ecosystem
PyPI
Packages
thrift
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-409
Reviewed
2026-09-01

Affected packages

• PyPI thrift: < 0.24.0 → fixed in 0.24.0

Description

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

Related

Alias · CVE (1)

  • CVE-2026-41608 Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings. vulnerability

Weakness · CWE (1)

  • CWE-409 Improper Handling of Highly Compressed Data (Data Amplification) weakness

References