[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-41606":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":33,"aliases":34,"duplicate_of":9,"upstream":35,"downstream":36,"duplicates":47,"related":48,"reserved_at":9,"published_at":52,"modified_at":53,"state":54,"summary":55,"references_raw":64,"kevs":122,"epss":123,"epss_history":126,"metrics":337,"affected":345},"CVE-2026-41606","Uncontrolled Recursion vulnerability in Apache Thrift.\n\nThis issue affects Apache Thrift: before 0.23.0.\n\nUsers are recommended to upgrade to version 0.23.0, which fixes the issue.",null,[11,27],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-674","Uncontrolled Recursion","The product does not properly control the amount of recursion that takes place,  consuming excessive resources, such as allocated memory or the program stack.","weakness","Draft","Class",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":24,"name":25,"techniques":26},"CAPEC-231","Oversized Serialized Data Payloads",[],{"_key":28,"id":28,"name":29,"description":30,"type":15,"status":16,"abstraction":31,"likelihood_of_exploit":9,"capec":32},"CWE-606","Unchecked Input for Loop Condition","The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.","Base",[],[],[],[],[37,39,41,43,45],{"_key":38},"OPENSUSE-SU-2026:10685-1",{"_key":40},"DEBIAN-CVE-2026-41606",{"_key":42},"UBUNTU-CVE-2026-41606",{"_key":44},"SUSE-SU-2026:3056-1",{"_key":46},"SUSE-SU-2026:3057-1",[],[49,50,51],{"_key":38},{"_key":44},{"_key":46},"2026-04-28T09:21:12.815Z","2026-07-22T12:08:42.684Z","Analyzed",{"cisa_kev":56,"cisa_ransomware":56,"cisa_vendor":9,"epss_severity":57,"epss_score":58,"severity":59,"severity_score":60,"severity_version":61,"severity_source":62,"severity_vector":63,"severity_status":54},false,"low",0.01144,"medium",5.3,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",[65,74,78,84,89,94,98,102,106,110,114,118],{"url":66,"sources":67,"tags":69},"https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",[62,68],"nvd",[70,71,72,73],"Vendor Advisory","Mailing List","Patch","Release Notes",{"url":75,"sources":76,"tags":77},"http://www.openwall.com/lists/oss-security/2026/04/28/3",[62,68],[71],{"url":79,"sources":80,"tags":81},"https://access.redhat.com/security/cve/CVE-2026-41606",[62],[82,83],"VDB Entry","X Refsource REDHAT",{"url":85,"sources":86,"tags":87},"https://bugzilla.redhat.com/show_bug.cgi?id=2463408",[62],[88,83],"Issue Tracking",{"url":90,"sources":91,"tags":92},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41606.json",[62],[93],"X Sadp Csaf Vex",{"url":95,"sources":96,"tags":97},"https://access.redhat.com/errata/RHSA-2026:22423",[62],[70,83],{"url":99,"sources":100,"tags":101},"https://access.redhat.com/errata/RHSA-2026:22347",[62],[70,83],{"url":103,"sources":104,"tags":105},"https://access.redhat.com/errata/RHSA-2026:21769",[62],[70,83],{"url":107,"sources":108,"tags":109},"https://access.redhat.com/errata/RHSA-2026:23345",[62],[70,83],{"url":111,"sources":112,"tags":113},"https://access.redhat.com/errata/RHSA-2026:24539",[62],[70,83],{"url":115,"sources":116,"tags":117},"https://access.redhat.com/errata/RHSA-2026:14885",[62],[70,83],{"url":119,"sources":120,"tags":121},"https://access.redhat.com/errata/RHSA-2026:36882",[62],[70,83],[],{"date":124,"score":58,"percentile":125},"2026-07-05",0.62857,[127,131,135,138,141,144,147,151,154,157,160,163,166,169,172,175,178,181,184,187,190,193,196,199,202,206,209,212,215,218,221,224,227,231,234,237,240,243,246,249,252,255,258,261,264,267,270,273,276,280,283,286,289,292,295,298,301,304,307,310,313,316,319,321,324,327,330,333,336],{"date":128,"score":129,"percentile":130},"2026-04-28",0.00018,0.04964,{"date":132,"score":133,"percentile":134},"2026-04-29",0.00133,0.32524,{"date":136,"score":133,"percentile":137},"2026-04-30",0.32498,{"date":139,"score":133,"percentile":140},"2026-05-01",0.325,{"date":142,"score":133,"percentile":143},"2026-05-02",0.3253,{"date":145,"score":133,"percentile":146},"2026-05-03",0.32473,{"date":148,"score":149,"percentile":150},"2026-05-04",0.00175,0.38558,{"date":152,"score":149,"percentile":153},"2026-05-05",0.38526,{"date":155,"score":149,"percentile":156},"2026-05-06",0.3854,{"date":158,"score":149,"percentile":159},"2026-05-07",0.386,{"date":161,"score":149,"percentile":162},"2026-05-08",0.38587,{"date":164,"score":149,"percentile":165},"2026-05-09",0.38614,{"date":167,"score":149,"percentile":168},"2026-05-10",0.38561,{"date":170,"score":149,"percentile":171},"2026-05-11",0.38527,{"date":173,"score":149,"percentile":174},"2026-05-12",0.38551,{"date":176,"score":149,"percentile":177},"2026-05-13",0.3859,{"date":179,"score":149,"percentile":180},"2026-05-14",0.38625,{"date":182,"score":149,"percentile":183},"2026-05-15",0.38631,{"date":185,"score":149,"percentile":186},"2026-05-16",0.38653,{"date":188,"score":149,"percentile":189},"2026-05-17",0.38613,{"date":191,"score":149,"percentile":192},"2026-05-18",0.38572,{"date":194,"score":149,"percentile":195},"2026-05-19",0.38575,{"date":197,"score":149,"percentile":198},"2026-05-20",0.38583,{"date":200,"score":149,"percentile":201},"2026-05-21",0.38578,{"date":203,"score":204,"percentile":205},"2026-05-22",0.00065,0.20194,{"date":207,"score":204,"percentile":208},"2026-05-23",0.20187,{"date":210,"score":204,"percentile":211},"2026-05-24",0.20144,{"date":213,"score":204,"percentile":214},"2026-05-25",0.20111,{"date":216,"score":204,"percentile":217},"2026-05-26",0.20106,{"date":219,"score":204,"percentile":220},"2026-05-27",0.20184,{"date":222,"score":204,"percentile":223},"2026-05-28",0.20309,{"date":225,"score":204,"percentile":226},"2026-05-29",0.20359,{"date":228,"score":229,"percentile":230},"2026-05-30",0.00073,0.22149,{"date":232,"score":229,"percentile":233},"2026-05-31",0.22148,{"date":235,"score":229,"percentile":236},"2026-06-01",0.22133,{"date":238,"score":229,"percentile":239},"2026-06-02",0.22143,{"date":241,"score":229,"percentile":242},"2026-06-03",0.22139,{"date":244,"score":229,"percentile":245},"2026-06-04",0.22144,{"date":247,"score":229,"percentile":248},"2026-06-05",0.22228,{"date":250,"score":229,"percentile":251},"2026-06-06",0.22215,{"date":253,"score":229,"percentile":254},"2026-06-07",0.22169,{"date":256,"score":229,"percentile":257},"2026-06-08",0.22114,{"date":259,"score":229,"percentile":260},"2026-06-09",0.22127,{"date":262,"score":229,"percentile":263},"2026-06-10",0.22142,{"date":265,"score":229,"percentile":266},"2026-06-11",0.22158,{"date":268,"score":229,"percentile":269},"2026-06-12",0.22348,{"date":271,"score":229,"percentile":272},"2026-06-13",0.22362,{"date":274,"score":229,"percentile":275},"2026-06-14",0.2234,{"date":277,"score":278,"percentile":279},"2026-06-15",0.00585,0.43143,{"date":281,"score":278,"percentile":282},"2026-06-16",0.43198,{"date":284,"score":278,"percentile":285},"2026-06-17",0.43279,{"date":287,"score":278,"percentile":288},"2026-06-18",0.43323,{"date":290,"score":278,"percentile":291},"2026-06-19",0.43314,{"date":293,"score":278,"percentile":294},"2026-06-20",0.43308,{"date":296,"score":278,"percentile":297},"2026-06-21",0.43293,{"date":299,"score":278,"percentile":300},"2026-06-22",0.43284,{"date":302,"score":278,"percentile":303},"2026-06-23",0.43365,{"date":305,"score":278,"percentile":306},"2026-06-24",0.43405,{"date":308,"score":278,"percentile":309},"2026-06-25",0.43485,{"date":311,"score":278,"percentile":312},"2026-06-26",0.43528,{"date":314,"score":278,"percentile":315},"2026-06-27",0.4357,{"date":317,"score":278,"percentile":318},"2026-06-28",0.43564,{"date":320,"score":278,"percentile":315},"2026-06-29",{"date":322,"score":58,"percentile":323},"2026-06-30",0.6273,{"date":325,"score":58,"percentile":326},"2026-07-01",0.62797,{"date":328,"score":58,"percentile":329},"2026-07-02",0.62823,{"date":331,"score":58,"percentile":332},"2026-07-03",0.62834,{"date":334,"score":58,"percentile":335},"2026-07-04",0.62852,{"date":124,"score":58,"percentile":125},[338,343],{"source":62,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":339,"cvss_v4_0":9},{"baseScore":60,"baseSeverity":340,"vectorString":63,"impactScore":341,"exploitabilityScore":342},"MEDIUM",2.3,10,{"source":68,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":344,"cvss_v4_0":9},{"baseScore":60,"baseSeverity":340,"vectorString":63,"impactScore":341,"exploitabilityScore":342},[346,357],{"ecosystem":9,"name":347,"vendor":348,"product":349,"cpe_part":350,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":351},"Apache Thrift","apache software foundation","apache thrift","a",[352],{"version":353,"is_range":354,"range_type":62,"version_start":9,"version_start_type":9,"version_end":355,"version_end_type":356,"fixed_in":9},"\u003C 0.23.0",true,"0.23.0","excluding",{"ecosystem":9,"name":358,"vendor":359,"product":358,"cpe_part":350,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":360},"thrift","apache",[361],{"version":362,"is_range":354,"range_type":363,"version_start":9,"version_start_type":9,"version_end":355,"version_end_type":356,"fixed_in":9},"lt0.23.0","cpe"]