- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 4 · 3 high, 1 medium
- Weekly downloads
- 10.2M
- Dependents
- 490
- Registry
- PyPI
Advisories 4
- CVE-2026-66053Medium 5.9
Apache Thrift: Python TSSLSocket Hostname Matcher Import
Affected: fixed in 0.24.0; fixed in 0.24.0.
- CVE-2026-48586High 8.7
Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit
Affected: fixed in 0.24.0.
- CVE-2026-43871High 8.7
Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit
Affected: fixed in 0.24.0; fixed in 0.24.0.
- CVE-2026-41608High 7.5
Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport
Affected: fixed in 0.24.0; fixed in 0.24.0.