Description
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.
Remediation
References
Related Vulnerabilities
axios Improper Authentication Vulnerability (CVE-2026-42041)
Collabtive Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2015-0258)
WordPress Plugin WP-Curriculo Vitae Free Arbitrary File Upload (6.3)
WordPress Plugin WP Telegram (Auto Post and Notifications) Unspecified Vulnerability (2.1.8)
WordPress Plugin Aspose DOC Exporter Arbitrary File Download (1.0)