{"vulnerability": "CVE-2026-49158", "sightings": [{"uuid": "9b30f08f-9d91-4147-b3ed-0170021303cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49158", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgi4fyong2n", "content": "CVE-2026-49158: Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb", "creation_timestamp": "2026-07-24T23:13:21.625821Z"}, {"uuid": "644f8a42-f872-4d80-819a-26460d85513b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49158", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrnequj7z42o", "content": "CVE-2026-49158 - Supply chain attack in Apache Thrift Ruby bindings. Data amplification issue. CVSS 7.5. Upgrade to 0.24.0 now. #CVE #Apache #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-49158/", "creation_timestamp": "2026-07-27T17:01:51.287577Z"}]}