CVE-2026-86535
2026-10-02
12h17 +00:00
12h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Loop with unreachable exit condition ('infinite loop'), Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift NodeJS bindings with TJSONProtocol.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to version 0.25.0, which fixes the issue.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Loop with Unreachable Exit Condition The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop. |
||
| Improperly Controlled Modification of Object Prototype Attributes The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype. |
