Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/facebook/fbthrift

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
pkg.go.dev

Advisories 2

  • Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload.

    Affected: fixed in 0.31.1-0.20200311080807-483ed864d69f.

  • Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type.

    Affected: fixed in 0.31.1-0.20190225164308-c461c1bd1a3e.