CVE-2026-86536
2026-10-02
12h17 +00:00
12h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift all JS bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to version 0.25.0 and re-generate JS code, which fixes the issue.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Improperly Controlled Modification of Object Prototype Attributes The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype. |
