{"action":"Upgrade org.apache.thrift:libthrift to 0.23.0 or later.","affected":[{"fixed":"0.23.0","introduced":"0"}],"component":"org.apache.thrift:libthrift","cve_ids":["CVE-2026-43869"],"ecosystem":"Maven","epss":0.00809,"exploited":false,"fixed_versions":["0.23.0"],"ghsa_id":"GHSA-7pwc-h2j2-rjgj","id":"tcs_01M5N8JVHTZ7BWVNR7SFFSDDFM","modified_at":"2026-09-10T03:50:46.239820015Z","published_at":"2026-05-05T09:31:55Z","references":["https://osv.dev/vulnerability/GHSA-7pwc-h2j2-rjgj","https://nvd.nist.gov/vuln/detail/CVE-2026-43869","https://github.com/apache/thrift/commit/0919c3d5506151514e283a63e1fe1ce83e2449d8","https://github.com/apache/thrift","https://github.com/apache/thrift/releases/tag/v0.23.0","https://lists.apache.org/thread/3hsgl1b69wzq3ry39scqbv2dhyl3j52r","http://www.openwall.com/lists/oss-security/2026/05/05/3"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-7pwc-h2j2-rjgj","url":"https://osv.dev/vulnerability/GHSA-7pwc-h2j2-rjgj"}],"summary":"Apache Thrift has an Improper Validation of Certificate with Host Mismatch Vulnerability"}