[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-41604":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":24,"duplicate_of":9,"upstream":25,"downstream":26,"duplicates":37,"related":38,"reserved_at":9,"published_at":42,"modified_at":43,"state":44,"summary":45,"references_raw":54,"kevs":112,"epss":113,"epss_history":116,"metrics":327,"affected":334},"CVE-2026-41604","Out-of-bounds Read vulnerability in Apache Thrift.\n\nThis issue affects Apache Thrift: before 0.23.0.\n\nUsers are recommended to upgrade to version 0.23.0, which fixes the issue.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-540","Overread Buffers",[],[],[],[],[27,29,31,33,35],{"_key":28},"OPENSUSE-SU-2026:10685-1",{"_key":30},"DEBIAN-CVE-2026-41604",{"_key":32},"UBUNTU-CVE-2026-41604",{"_key":34},"SUSE-SU-2026:3056-1",{"_key":36},"SUSE-SU-2026:3057-1",[],[39,40,41],{"_key":28},{"_key":34},{"_key":36},"2026-04-28T09:20:13.996Z","2026-07-22T12:08:37.432Z","Analyzed",{"cisa_kev":46,"cisa_ransomware":46,"cisa_vendor":9,"epss_severity":47,"epss_score":48,"severity":49,"severity_score":50,"severity_version":51,"severity_source":52,"severity_vector":53,"severity_status":44},false,"low",0.00954,"high",8.2,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",[55,64,68,74,79,84,88,92,96,100,104,108],{"url":56,"sources":57,"tags":59},"https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",[52,58],"nvd",[60,61,62,63],"Vendor Advisory","Mailing List","Patch","Release Notes",{"url":65,"sources":66,"tags":67},"http://www.openwall.com/lists/oss-security/2026/04/28/5",[52,58],[61],{"url":69,"sources":70,"tags":71},"https://access.redhat.com/security/cve/CVE-2026-41604",[52],[72,73],"VDB Entry","X Refsource REDHAT",{"url":75,"sources":76,"tags":77},"https://bugzilla.redhat.com/show_bug.cgi?id=2463416",[52],[78,73],"Issue Tracking",{"url":80,"sources":81,"tags":82},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41604.json",[52],[83],"X Sadp Csaf Vex",{"url":85,"sources":86,"tags":87},"https://access.redhat.com/errata/RHSA-2026:22423",[52],[60,73],{"url":89,"sources":90,"tags":91},"https://access.redhat.com/errata/RHSA-2026:22347",[52],[60,73],{"url":93,"sources":94,"tags":95},"https://access.redhat.com/errata/RHSA-2026:21769",[52],[60,73],{"url":97,"sources":98,"tags":99},"https://access.redhat.com/errata/RHSA-2026:23345",[52],[60,73],{"url":101,"sources":102,"tags":103},"https://access.redhat.com/errata/RHSA-2026:24539",[52],[60,73],{"url":105,"sources":106,"tags":107},"https://access.redhat.com/errata/RHSA-2026:14885",[52],[60,73],{"url":109,"sources":110,"tags":111},"https://access.redhat.com/errata/RHSA-2026:36882",[52],[60,73],[],{"date":114,"score":48,"percentile":115},"2026-07-05",0.57086,[117,121,125,128,131,134,137,141,144,147,150,153,156,159,162,165,168,171,174,177,180,183,186,189,192,196,199,202,205,208,211,214,217,221,224,227,230,233,236,239,242,245,248,251,254,256,259,262,265,269,272,275,278,281,284,287,290,293,296,299,302,305,308,311,314,317,320,323,326],{"date":118,"score":119,"percentile":120},"2026-04-28",0.00018,0.04964,{"date":122,"score":123,"percentile":124},"2026-04-29",0.00165,0.37203,{"date":126,"score":123,"percentile":127},"2026-04-30",0.37181,{"date":129,"score":123,"percentile":130},"2026-05-01",0.37184,{"date":132,"score":123,"percentile":133},"2026-05-02",0.37224,{"date":135,"score":123,"percentile":136},"2026-05-03",0.37175,{"date":138,"score":139,"percentile":140},"2026-05-04",0.00217,0.44045,{"date":142,"score":139,"percentile":143},"2026-05-05",0.4402,{"date":145,"score":139,"percentile":146},"2026-05-06",0.44039,{"date":148,"score":139,"percentile":149},"2026-05-07",0.44098,{"date":151,"score":139,"percentile":152},"2026-05-08",0.44085,{"date":154,"score":139,"percentile":155},"2026-05-09",0.44116,{"date":157,"score":139,"percentile":158},"2026-05-10",0.44076,{"date":160,"score":139,"percentile":161},"2026-05-11",0.44053,{"date":163,"score":139,"percentile":164},"2026-05-12",0.44083,{"date":166,"score":139,"percentile":167},"2026-05-13",0.44122,{"date":169,"score":139,"percentile":170},"2026-05-14",0.44149,{"date":172,"score":139,"percentile":173},"2026-05-15",0.44167,{"date":175,"score":139,"percentile":176},"2026-05-16",0.44198,{"date":178,"score":139,"percentile":179},"2026-05-17",0.442,{"date":181,"score":139,"percentile":182},"2026-05-18",0.44157,{"date":184,"score":139,"percentile":185},"2026-05-19",0.4416,{"date":187,"score":139,"percentile":188},"2026-05-20",0.44165,{"date":190,"score":139,"percentile":191},"2026-05-21",0.44174,{"date":193,"score":194,"percentile":195},"2026-05-22",0.00063,0.19562,{"date":197,"score":194,"percentile":198},"2026-05-23",0.19558,{"date":200,"score":194,"percentile":201},"2026-05-24",0.19501,{"date":203,"score":194,"percentile":204},"2026-05-25",0.19477,{"date":206,"score":194,"percentile":207},"2026-05-26",0.19475,{"date":209,"score":194,"percentile":210},"2026-05-27",0.19561,{"date":212,"score":194,"percentile":213},"2026-05-28",0.19693,{"date":215,"score":194,"percentile":216},"2026-05-29",0.19756,{"date":218,"score":219,"percentile":220},"2026-05-30",0.0007,0.21636,{"date":222,"score":219,"percentile":223},"2026-05-31",0.21635,{"date":225,"score":219,"percentile":226},"2026-06-01",0.2161,{"date":228,"score":219,"percentile":229},"2026-06-02",0.2162,{"date":231,"score":219,"percentile":232},"2026-06-03",0.21621,{"date":234,"score":219,"percentile":235},"2026-06-04",0.21623,{"date":237,"score":219,"percentile":238},"2026-06-05",0.21701,{"date":240,"score":219,"percentile":241},"2026-06-06",0.21687,{"date":243,"score":219,"percentile":244},"2026-06-07",0.21643,{"date":246,"score":219,"percentile":247},"2026-06-08",0.21584,{"date":249,"score":219,"percentile":250},"2026-06-09",0.21593,{"date":252,"score":219,"percentile":253},"2026-06-10",0.21614,{"date":255,"score":219,"percentile":223},"2026-06-11",{"date":257,"score":219,"percentile":258},"2026-06-12",0.21823,{"date":260,"score":219,"percentile":261},"2026-06-13",0.21836,{"date":263,"score":219,"percentile":264},"2026-06-14",0.21809,{"date":266,"score":267,"percentile":268},"2026-06-15",0.0058,0.42949,{"date":270,"score":267,"percentile":271},"2026-06-16",0.43002,{"date":273,"score":267,"percentile":274},"2026-06-17",0.43084,{"date":276,"score":267,"percentile":277},"2026-06-18",0.43127,{"date":279,"score":267,"percentile":280},"2026-06-19",0.43118,{"date":282,"score":267,"percentile":283},"2026-06-20",0.43113,{"date":285,"score":267,"percentile":286},"2026-06-21",0.43097,{"date":288,"score":267,"percentile":289},"2026-06-22",0.43089,{"date":291,"score":267,"percentile":292},"2026-06-23",0.4317,{"date":294,"score":267,"percentile":295},"2026-06-24",0.43212,{"date":297,"score":267,"percentile":298},"2026-06-25",0.4329,{"date":300,"score":267,"percentile":301},"2026-06-26",0.43333,{"date":303,"score":267,"percentile":304},"2026-06-27",0.43375,{"date":306,"score":267,"percentile":307},"2026-06-28",0.43368,{"date":309,"score":267,"percentile":310},"2026-06-29",0.43373,{"date":312,"score":48,"percentile":313},"2026-06-30",0.5692,{"date":315,"score":48,"percentile":316},"2026-07-01",0.56998,{"date":318,"score":48,"percentile":319},"2026-07-02",0.57033,{"date":321,"score":48,"percentile":322},"2026-07-03",0.57052,{"date":324,"score":48,"percentile":325},"2026-07-04",0.57074,{"date":114,"score":48,"percentile":115},[328,332],{"source":52,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":329,"cvss_v4_0":9},{"baseScore":50,"baseSeverity":330,"vectorString":53,"impactScore":4,"exploitabilityScore":331},"HIGH",10,{"source":58,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":333,"cvss_v4_0":9},{"baseScore":50,"baseSeverity":330,"vectorString":53,"impactScore":4,"exploitabilityScore":331},[335,346],{"ecosystem":9,"name":336,"vendor":337,"product":338,"cpe_part":339,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":340},"Apache Thrift","apache software foundation","apache thrift","a",[341],{"version":342,"is_range":343,"range_type":52,"version_start":9,"version_start_type":9,"version_end":344,"version_end_type":345,"fixed_in":9},"\u003C 0.23.0",true,"0.23.0","excluding",{"ecosystem":9,"name":347,"vendor":348,"product":347,"cpe_part":339,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":349},"thrift","apache",[350],{"version":351,"is_range":343,"range_type":352,"version_start":9,"version_start_type":9,"version_end":344,"version_end_type":345,"fixed_in":9},"lt0.23.0","cpe"]