[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-41607":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T23:19:30.300Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":24,"duplicate_of":9,"upstream":25,"downstream":26,"duplicates":41,"related":42,"reserved_at":9,"published_at":48,"modified_at":49,"state":50,"summary":51,"references_raw":60,"kevs":118,"epss":119,"epss_history":122,"metrics":331,"affected":339},"CVE-2026-41607","Out-of-bounds Read vulnerability in Apache Thrift.\n\nThis issue affects Apache Thrift: before 0.23.0.\n\nUsers are recommended to upgrade to version 0.23.0, which fixes the issue.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-540","Overread Buffers",[],[],[],[],[27,29,31,33,35,37,39],{"_key":28},"OPENSUSE-SU-2026:10685-1",{"_key":30},"DEBIAN-CVE-2026-41607",{"_key":32},"OPENSUSE-SU-2026:11040-1",{"_key":34},"UBUNTU-CVE-2026-41607",{"_key":36},"SUSE-SU-2026:3056-1",{"_key":38},"SUSE-SU-2026:3057-1",{"_key":40},"OPENSUSE-SU-2026:21351-1",[],[43,44,45,46,47],{"_key":28},{"_key":32},{"_key":36},{"_key":38},{"_key":40},"2026-04-28T09:21:48.502Z","2026-07-22T12:08:49.627Z","Analyzed",{"cisa_kev":52,"cisa_ransomware":52,"cisa_vendor":9,"epss_severity":53,"epss_score":54,"severity":55,"severity_score":56,"severity_version":57,"severity_source":58,"severity_vector":59,"severity_status":50},false,"low",0.00967,"medium",6.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",[61,70,74,80,85,90,94,98,102,106,110,114],{"url":62,"sources":63,"tags":65},"https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",[58,64],"nvd",[66,67,68,69],"Vendor Advisory","Mailing List","Patch","Release Notes",{"url":71,"sources":72,"tags":73},"http://www.openwall.com/lists/oss-security/2026/04/28/2",[58,64],[67],{"url":75,"sources":76,"tags":77},"https://access.redhat.com/security/cve/CVE-2026-41607",[58],[78,79],"VDB Entry","X Refsource REDHAT",{"url":81,"sources":82,"tags":83},"https://bugzilla.redhat.com/show_bug.cgi?id=2463412",[58],[84,79],"Issue Tracking",{"url":86,"sources":87,"tags":88},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41607.json",[58],[89],"X Sadp Csaf Vex",{"url":91,"sources":92,"tags":93},"https://access.redhat.com/errata/RHSA-2026:22423",[58],[66,79],{"url":95,"sources":96,"tags":97},"https://access.redhat.com/errata/RHSA-2026:22347",[58],[66,79],{"url":99,"sources":100,"tags":101},"https://access.redhat.com/errata/RHSA-2026:21769",[58],[66,79],{"url":103,"sources":104,"tags":105},"https://access.redhat.com/errata/RHSA-2026:23345",[58],[66,79],{"url":107,"sources":108,"tags":109},"https://access.redhat.com/errata/RHSA-2026:24539",[58],[66,79],{"url":111,"sources":112,"tags":113},"https://access.redhat.com/errata/RHSA-2026:14885",[58],[66,79],{"url":115,"sources":116,"tags":117},"https://access.redhat.com/errata/RHSA-2026:36882",[58],[66,79],[],{"date":120,"score":54,"percentile":121},"2026-07-05",0.57458,[123,127,131,134,137,140,143,147,150,153,156,159,162,165,167,170,173,176,179,182,185,188,190,193,196,200,203,206,209,212,214,217,220,224,227,230,233,236,239,242,245,248,251,254,257,260,263,266,269,273,276,279,282,285,288,291,294,297,300,303,306,309,312,315,318,321,324,327,330],{"date":124,"score":125,"percentile":126},"2026-04-28",0.00018,0.04964,{"date":128,"score":129,"percentile":130},"2026-04-29",0.00127,0.31621,{"date":132,"score":129,"percentile":133},"2026-04-30",0.31591,{"date":135,"score":129,"percentile":136},"2026-05-01",0.31589,{"date":138,"score":129,"percentile":139},"2026-05-02",0.3162,{"date":141,"score":129,"percentile":142},"2026-05-03",0.31556,{"date":144,"score":145,"percentile":146},"2026-05-04",0.00167,0.3736,{"date":148,"score":145,"percentile":149},"2026-05-05",0.37334,{"date":151,"score":145,"percentile":152},"2026-05-06",0.37344,{"date":154,"score":145,"percentile":155},"2026-05-07",0.37404,{"date":157,"score":145,"percentile":158},"2026-05-08",0.37392,{"date":160,"score":145,"percentile":161},"2026-05-09",0.37426,{"date":163,"score":145,"percentile":164},"2026-05-10",0.37378,{"date":166,"score":145,"percentile":152},"2026-05-11",{"date":168,"score":145,"percentile":169},"2026-05-12",0.37316,{"date":171,"score":145,"percentile":172},"2026-05-13",0.37361,{"date":174,"score":145,"percentile":175},"2026-05-14",0.37397,{"date":177,"score":145,"percentile":178},"2026-05-15",0.37416,{"date":180,"score":145,"percentile":181},"2026-05-16",0.37436,{"date":183,"score":145,"percentile":184},"2026-05-17",0.37394,{"date":186,"score":145,"percentile":187},"2026-05-18",0.37355,{"date":189,"score":145,"percentile":172},"2026-05-19",{"date":191,"score":145,"percentile":192},"2026-05-20",0.37363,{"date":194,"score":145,"percentile":195},"2026-05-21",0.37359,{"date":197,"score":198,"percentile":199},"2026-05-22",0.00062,0.19325,{"date":201,"score":198,"percentile":202},"2026-05-23",0.1932,{"date":204,"score":198,"percentile":205},"2026-05-24",0.19263,{"date":207,"score":198,"percentile":208},"2026-05-25",0.19244,{"date":210,"score":198,"percentile":211},"2026-05-26",0.1924,{"date":213,"score":198,"percentile":199},"2026-05-27",{"date":215,"score":198,"percentile":216},"2026-05-28",0.19461,{"date":218,"score":198,"percentile":219},"2026-05-29",0.19524,{"date":221,"score":222,"percentile":223},"2026-05-30",0.00069,0.21403,{"date":225,"score":222,"percentile":226},"2026-05-31",0.21399,{"date":228,"score":222,"percentile":229},"2026-06-01",0.21372,{"date":231,"score":222,"percentile":232},"2026-06-02",0.21382,{"date":234,"score":222,"percentile":235},"2026-06-03",0.21383,{"date":237,"score":222,"percentile":238},"2026-06-04",0.21387,{"date":240,"score":222,"percentile":241},"2026-06-05",0.21467,{"date":243,"score":222,"percentile":244},"2026-06-06",0.21453,{"date":246,"score":222,"percentile":247},"2026-06-07",0.21405,{"date":249,"score":222,"percentile":250},"2026-06-08",0.21342,{"date":252,"score":222,"percentile":253},"2026-06-09",0.21352,{"date":255,"score":222,"percentile":256},"2026-06-10",0.2137,{"date":258,"score":222,"percentile":259},"2026-06-11",0.21392,{"date":261,"score":222,"percentile":262},"2026-06-12",0.21576,{"date":264,"score":222,"percentile":265},"2026-06-13",0.21589,{"date":267,"score":222,"percentile":268},"2026-06-14",0.21562,{"date":270,"score":271,"percentile":272},"2026-06-15",0.00514,0.3948,{"date":274,"score":271,"percentile":275},"2026-06-16",0.39536,{"date":277,"score":271,"percentile":278},"2026-06-17",0.39602,{"date":280,"score":271,"percentile":281},"2026-06-18",0.39655,{"date":283,"score":271,"percentile":284},"2026-06-19",0.39646,{"date":286,"score":271,"percentile":287},"2026-06-20",0.39638,{"date":289,"score":271,"percentile":290},"2026-06-21",0.3962,{"date":292,"score":271,"percentile":293},"2026-06-22",0.39612,{"date":295,"score":271,"percentile":296},"2026-06-23",0.39697,{"date":298,"score":271,"percentile":299},"2026-06-24",0.39734,{"date":301,"score":271,"percentile":302},"2026-06-25",0.39809,{"date":304,"score":271,"percentile":305},"2026-06-26",0.39852,{"date":307,"score":271,"percentile":308},"2026-06-27",0.39892,{"date":310,"score":271,"percentile":311},"2026-06-28",0.39878,{"date":313,"score":271,"percentile":314},"2026-06-29",0.39881,{"date":316,"score":54,"percentile":317},"2026-06-30",0.57299,{"date":319,"score":54,"percentile":320},"2026-07-01",0.57376,{"date":322,"score":54,"percentile":323},"2026-07-02",0.5741,{"date":325,"score":54,"percentile":326},"2026-07-03",0.57427,{"date":328,"score":54,"percentile":329},"2026-07-04",0.57447,{"date":120,"score":54,"percentile":121},[332,337],{"source":58,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":333,"cvss_v4_0":9},{"baseScore":56,"baseSeverity":334,"vectorString":59,"impactScore":335,"exploitabilityScore":336},"MEDIUM",4.2,10,{"source":64,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":338,"cvss_v4_0":9},{"baseScore":56,"baseSeverity":334,"vectorString":59,"impactScore":335,"exploitabilityScore":336},[340,351],{"ecosystem":9,"name":341,"vendor":342,"product":343,"cpe_part":344,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":345},"Apache Thrift","apache software foundation","apache thrift","a",[346],{"version":347,"is_range":348,"range_type":58,"version_start":9,"version_start_type":9,"version_end":349,"version_end_type":350,"fixed_in":9},"\u003C 0.23.0",true,"0.23.0","excluding",{"ecosystem":9,"name":352,"vendor":353,"product":352,"cpe_part":344,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":354},"thrift","apache",[355],{"version":356,"is_range":348,"range_type":357,"version_start":9,"version_start_type":9,"version_end":349,"version_end_type":350,"fixed_in":9},"lt0.23.0","cpe"]