VDB
Sign up
HIGH

GHSA-r67j-r569-jrwp

Apache Thrift Node.js bindings vulnerable to Uncontrolled Recursion

Quick fix

GHSA-r67j-r569-jrwp — thrift: upgrade to the fixed version with the command below.

npm install thrift@0.23.0

Details

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings

This issue affects Apache Thrift: before 0.23.0.

Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/thrift
Introduced in: 0Fixed in: 0.23.0
Fixnpm install thrift@0.23.0

References