← All credits
Sylwester Lachiewicz
15 vulnerability records and advisories credit this contributor.
CVE-2026-94633
Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length
CVE-2026-94642
Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception
CVE-2026-94644
Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound
CVE-2026-94645
Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound
CVE-2026-94639
Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget)