Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-94654

Apache Thrift: Python `TNonblockingServer` busy-loops and stops selecting all fds after an 8192-byte-boundary frame

Description

Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Thrift

Default version status: unaffected

  • 0 to < 0.25.0affected
pkg:pypi/thrift

References