CVE-2026-94645
2026-10-02
11h17 +00:00
11h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Improper validation of specified quantity in input, Allocation of resources without limits or throttling vulnerability in Apache Thrift nodejs bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to version 0.25.0, which fixes the issue.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Allocation of Resources Without Limits or Throttling The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated. |
||
| Improper Validation of Specified Quantity in Input The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties. |
