Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-82458, CVE-2026-94637
By Nevo Evenhaim |
2 October 2026
Apache Thrift Multiple DoS Vulnerabilities – Unbounded ZLIB Inflation and Container Allocation
Apache Thrift contains resource exhaustion vulnerabilities allowing network-supplied payloads to cause DoS. CVE-2026-94637: Go THeaderTransport allows excessive ZLIB frame inflation. CVE-2026-82458: Multiple language bindings allow unbounded container element allocation. Affects Apache Thrift versions `