{"action":"Upgrade thrift to 0.23.0 or later.","affected":[{"fixed":"0.23.0","introduced":"0"}],"component":"thrift","cve_ids":["CVE-2026-43868"],"ecosystem":"crates.io","epss":0.00706,"exploited":false,"fixed_versions":["0.23.0"],"ghsa_id":"GHSA-2f9f-gq7v-9h6m","id":"tcs_01M5KER60VKP3J1QJ7E7TYJD28","modified_at":"2026-09-10T03:50:45.242983311Z","published_at":"2026-05-05T09:31:55Z","references":["https://osv.dev/vulnerability/GHSA-2f9f-gq7v-9h6m","https://nvd.nist.gov/vuln/detail/CVE-2026-43868","https://github.com/apache/thrift/commit/d5152211af61f850ec393604316804096dd4632e","https://access.redhat.com/errata/RHSA-2026:26586","https://access.redhat.com/errata/RHSA-2026:42644","https://access.redhat.com/security/cve/CVE-2026-43868","https://bugzilla.redhat.com/show_bug.cgi?id=2466670","https://github.com/apache/thrift","https://lists.apache.org/thread/zj76dtwnbbs1m7z3focf4wd51pqpsmn9","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43868.json"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-2f9f-gq7v-9h6m","url":"https://osv.dev/vulnerability/GHSA-2f9f-gq7v-9h6m"}],"summary":"Apache Thrift has a Memory Allocation with Excessive Size Value Vulnerability"}