CyberRota Analysis
AI-GeneratedApache Thrift versions prior to 0.24.0 are vulnerable to an allocation of resources without limits or throttling, which could lead to denial-of-service conditions due to excessive resource consumption. Organizations utilizing Apache Thrift in their Java applications should prioritize upgrading to version 0.24.0 to mitigate this high-severity risk.
CVE
CVE-2026-45112
Severity
HIGH
CVSS
7.5
EPSS
1.07%
Apache Java
Original NVD Description
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: from 0.19.0 before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)