<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 04:18:28 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-41602 — Apache Thrift: Go TFramedTransport uint32 overflow</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-41602</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Apache Software Foundation Apache Thrift, Red Hat Multicluster Global Hub 1.3.4, Red Hat Multicluster Global Hub 1.4.5, Red Hat Multicluster Global Hub 1.6.5, Red Hat Multicluster Global Hub 1.7.0, Red Hat Advanced Cluster Management for Kubernetes 2.14, Red Hat Advanced Cluster Management for Kubernetes 2.15, Red Hat Advanced Cluster Management for Kubernetes 2.16, Red Hat multicluster global hub 1.5.3, Red Hat OpenShift distributed tracing 3.9.3 and 10 more&lt;/p&gt;
&lt;p&gt;Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation&lt;/p&gt;
&lt;p&gt;This issue affects Apache Thrift: before 0.23.0.&lt;/p&gt;
&lt;p&gt;Users are recommended to upgrade to version 0.23.0, which fixes the issue.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Apache Software Foundation Apache Thrift, Red Hat Multicluster Global Hub 1.3.4, Red Hat Multicluster Global Hub 1.4.5, Red Hat Multicluster Global Hub 1.6.5, Red Hat Multicluster Global Hub 1.7.0, Red Hat Advanced Cluster Management for Kubernetes 2.14, Red Hat Advanced Cluster Management for Kubernetes 2.15, Red Hat Advanced Cluster Management for Kubernetes 2.16, Red Hat multicluster global hub 1.5.3, Red Hat OpenShift distributed tracing 3.9.3 and 10 more&lt;/p&gt;
&lt;p&gt;Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation&lt;/p&gt;
&lt;p&gt;This issue affects Apache Thrift: before 0.23.0.&lt;/p&gt;
&lt;p&gt;Users are recommended to upgrade to version 0.23.0, which fixes the issue.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-41602</guid>
    </item>
  </channel>
</rss>
