CVE-2026-120135 — Vulnerability intelligence
Apache Software Foundation — Apache Thrift
Published:
- CVSS
- 8.2
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
Uncontrolled Recursion vulnerability in Apache Thrift Java bindings.
This issue affects Apache Thrift: before 0.24.0.
Users are recommended to upgrade to version 0.24.0, which fixes the issue.