{"action":"Upgrade github.com/facebook/fbthrift to 0.31.1-0.20190225164308-c461c1bd1a3e or later.","affected":[{"fixed":"0.31.1-0.20190225164308-c461c1bd1a3e","introduced":"0"}],"component":"github.com/facebook/fbthrift","cve_ids":["CVE-2019-3564"],"ecosystem":"Go","epss":0.01994,"exploited":false,"fixed_versions":["0.31.1-0.20190225164308-c461c1bd1a3e"],"ghsa_id":"GHSA-x4rg-4545-4w7w","id":"tcs_01M5KFRJP3DXZ0BTYXR6XZWYR4","modified_at":"2026-09-10T03:49:12.304569844Z","published_at":"2022-02-15T01:57:18Z","references":["https://osv.dev/vulnerability/GHSA-x4rg-4545-4w7w","https://nvd.nist.gov/vuln/detail/CVE-2019-3564","https://github.com/facebook/fbthrift/commit/c461c1bd1a3e130b181aa9c854da3030cd4b5156","https://github.com/facebook/fbthrift","https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E","https://pkg.go.dev/vuln/GO-2021-0088","https://www.facebook.com/security/advisories/cve-2019-3564"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-x4rg-4545-4w7w","url":"https://osv.dev/vulnerability/GHSA-x4rg-4545-4w7w"}],"summary":"Improper Input Validation and Excessive Iteration in Go Facebook Thrift"}