CVE-2026-41636

Published: Apr 28, 2026

Modified: Apr 28, 2026

PUBLISHED

Description

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Vendor	Product	Versions
Apache Software Foundation	Apache Thrift	affected `0 - < 0.23.0`

Weaknesses (CWE)

CWE-674

References

https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2026-41636

Description

Affected Products

Weaknesses (CWE)

References