UNKNOWN OSS-Security

CVE-2026-120135

CVE-2026-120135: Apache Thrift: Java TProtocolUtil.skip() does not limit the recursion depth by default

Affected Products

CVE-2026-120135

References

https://www.openwall.com/lists/oss-security/2026/10/31/2

Published: 2026-10-31 · Source: OSS-Security · Feed updated: 2026-10-31

This unknown severity vulnerability was published on 2026-10-31 via OSS-Security. Affected: CVE-2026-120135.

vulnfeed aggregates 17713 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.