[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-41636":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":28,"duplicate_of":9,"upstream":31,"downstream":32,"duplicates":43,"related":44,"reserved_at":9,"published_at":50,"modified_at":51,"state":52,"summary":53,"references_raw":62,"kevs":88,"epss":89,"epss_history":92,"metrics":301,"affected":315},"CVE-2026-41636","Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings\n\nThis issue affects Apache Thrift: before 0.23.0.\n\nUsers are recommended to upgrade to version 0.23.0, which fixes the issue.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-674","Uncontrolled Recursion","The product does not properly control the amount of recursion that takes place,  consuming excessive resources, such as allocated memory or the program stack.","weakness","Draft","Class",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":24,"name":25,"techniques":26},"CAPEC-231","Oversized Serialized Data Payloads",[],[],[29,30],"GHSA-r67j-r569-jrwp","BIT-thrift-2026-41636",[],[33,35,37,39,41],{"_key":34},"OPENSUSE-SU-2026:10685-1",{"_key":36},"UBUNTU-CVE-2026-41636",{"_key":38},"DEBIAN-CVE-2026-41636",{"_key":40},"SUSE-SU-2026:3056-1",{"_key":42},"SUSE-SU-2026:3057-1",[],[45,46,47,48],{"_key":34},{"_key":40},{"_key":42},{"_key":49},"CGA-R73V-V62H-C4RP","2026-04-28T09:22:14.639Z","2026-04-28T12:15:44.118Z","Analyzed",{"cisa_kev":54,"cisa_ransomware":54,"cisa_vendor":9,"epss_severity":55,"epss_score":56,"severity":57,"severity_score":58,"severity_version":59,"severity_source":60,"severity_vector":61,"severity_status":52},false,"low",0.00469,"high",8.7,"v4.0","cve.org","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L",[63,74,78,83],{"url":64,"sources":65,"tags":68},"https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",[60,66,67],"nvd","osv_npm",[69,70,71,72,73],"Vendor Advisory","Mailing List","Patch","Release Notes","WEB",{"url":75,"sources":76,"tags":77},"http://www.openwall.com/lists/oss-security/2026/04/28/1",[60,66,67],[70,73],{"url":79,"sources":80,"tags":81},"https://nvd.nist.gov/vuln/detail/CVE-2026-41636",[67],[82],"Advisory",{"url":84,"sources":85,"tags":86},"https://github.com/apache/thrift",[67],[87],"PACKAGE",[],{"date":90,"score":56,"percentile":91},"2026-07-05",0.37244,[93,97,101,104,107,110,113,117,120,123,126,129,132,135,138,141,144,147,150,153,156,159,162,165,168,171,174,177,180,182,185,188,191,195,198,201,204,207,210,213,216,219,222,225,228,231,234,237,240,243,246,249,252,255,258,261,264,267,270,273,276,279,282,285,288,291,294,297,300],{"date":94,"score":95,"percentile":96},"2026-04-28",0.00042,0.12742,{"date":98,"score":99,"percentile":100},"2026-04-29",0.00173,0.38383,{"date":102,"score":99,"percentile":103},"2026-04-30",0.38369,{"date":105,"score":99,"percentile":106},"2026-05-01",0.38371,{"date":108,"score":99,"percentile":109},"2026-05-02",0.38408,{"date":111,"score":99,"percentile":112},"2026-05-03",0.38358,{"date":114,"score":115,"percentile":116},"2026-05-04",0.00228,0.45371,{"date":118,"score":115,"percentile":119},"2026-05-05",0.4535,{"date":121,"score":115,"percentile":122},"2026-05-06",0.45368,{"date":124,"score":115,"percentile":125},"2026-05-07",0.45414,{"date":127,"score":115,"percentile":128},"2026-05-08",0.454,{"date":130,"score":115,"percentile":131},"2026-05-09",0.45432,{"date":133,"score":115,"percentile":134},"2026-05-10",0.45399,{"date":136,"score":115,"percentile":137},"2026-05-11",0.45377,{"date":139,"score":115,"percentile":140},"2026-05-12",0.45401,{"date":142,"score":115,"percentile":143},"2026-05-13",0.45444,{"date":145,"score":115,"percentile":146},"2026-05-14",0.45476,{"date":148,"score":115,"percentile":149},"2026-05-15",0.45493,{"date":151,"score":115,"percentile":152},"2026-05-16",0.45499,{"date":154,"score":115,"percentile":155},"2026-05-17",0.45491,{"date":157,"score":115,"percentile":158},"2026-05-18",0.45451,{"date":160,"score":115,"percentile":161},"2026-05-19",0.45457,{"date":163,"score":115,"percentile":164},"2026-05-20",0.45467,{"date":166,"score":115,"percentile":167},"2026-05-21",0.45472,{"date":169,"score":115,"percentile":170},"2026-05-22",0.45504,{"date":172,"score":115,"percentile":173},"2026-05-23",0.45498,{"date":175,"score":115,"percentile":176},"2026-05-24",0.4547,{"date":178,"score":115,"percentile":179},"2026-05-25",0.45438,{"date":181,"score":115,"percentile":131},"2026-05-26",{"date":183,"score":115,"percentile":184},"2026-05-27",0.45494,{"date":186,"score":115,"percentile":187},"2026-05-28",0.45584,{"date":189,"score":115,"percentile":190},"2026-05-29",0.4562,{"date":192,"score":193,"percentile":194},"2026-05-30",0.00255,0.48991,{"date":196,"score":193,"percentile":197},"2026-05-31",0.4898,{"date":199,"score":193,"percentile":200},"2026-06-01",0.48965,{"date":202,"score":193,"percentile":203},"2026-06-02",0.48985,{"date":205,"score":193,"percentile":206},"2026-06-03",0.48996,{"date":208,"score":193,"percentile":209},"2026-06-04",0.49016,{"date":211,"score":193,"percentile":212},"2026-06-05",0.49077,{"date":214,"score":193,"percentile":215},"2026-06-06",0.49086,{"date":217,"score":193,"percentile":218},"2026-06-07",0.4907,{"date":220,"score":193,"percentile":221},"2026-06-08",0.4904,{"date":223,"score":193,"percentile":224},"2026-06-09",0.49053,{"date":226,"score":193,"percentile":227},"2026-06-10",0.49093,{"date":229,"score":193,"percentile":230},"2026-06-11",0.49121,{"date":232,"score":193,"percentile":233},"2026-06-12",0.49258,{"date":235,"score":193,"percentile":236},"2026-06-13",0.49276,{"date":238,"score":193,"percentile":239},"2026-06-14",0.49264,{"date":241,"score":56,"percentile":242},"2026-06-15",0.36715,{"date":244,"score":56,"percentile":245},"2026-06-16",0.36771,{"date":247,"score":56,"percentile":248},"2026-06-17",0.36823,{"date":250,"score":56,"percentile":251},"2026-06-18",0.36881,{"date":253,"score":56,"percentile":254},"2026-06-19",0.36865,{"date":256,"score":56,"percentile":257},"2026-06-20",0.36856,{"date":259,"score":56,"percentile":260},"2026-06-21",0.36841,{"date":262,"score":56,"percentile":263},"2026-06-22",0.3683,{"date":265,"score":56,"percentile":266},"2026-06-23",0.36912,{"date":268,"score":56,"percentile":269},"2026-06-24",0.36952,{"date":271,"score":56,"percentile":272},"2026-06-25",0.3703,{"date":274,"score":56,"percentile":275},"2026-06-26",0.37071,{"date":277,"score":56,"percentile":278},"2026-06-27",0.37112,{"date":280,"score":56,"percentile":281},"2026-06-28",0.37091,{"date":283,"score":56,"percentile":284},"2026-06-29",0.37096,{"date":286,"score":56,"percentile":287},"2026-06-30",0.37068,{"date":289,"score":56,"percentile":290},"2026-07-01",0.37169,{"date":292,"score":56,"percentile":293},"2026-07-02",0.37197,{"date":295,"score":56,"percentile":296},"2026-07-03",0.37213,{"date":298,"score":56,"percentile":299},"2026-07-04",0.37228,{"date":90,"score":56,"percentile":91},[302,305,313],{"source":60,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":303},{"baseScore":58,"baseSeverity":304,"vectorString":61,"impactScore":9,"exploitabilityScore":9},"HIGH",{"source":66,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":306,"cvss_v4_0":311},{"baseScore":307,"baseSeverity":304,"vectorString":308,"impactScore":309,"exploitabilityScore":310},7.5,"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",6,10,{"baseScore":58,"baseSeverity":304,"vectorString":312,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":67,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":314},{"baseScore":58,"baseSeverity":9,"vectorString":61,"impactScore":9,"exploitabilityScore":9},[316,327,334],{"ecosystem":9,"name":317,"vendor":318,"product":319,"cpe_part":320,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":321},"Apache Thrift","apache software foundation","apache thrift","a",[322],{"version":323,"is_range":324,"range_type":60,"version_start":9,"version_start_type":9,"version_end":325,"version_end_type":326,"fixed_in":9},"\u003C 0.23.0",true,"0.23.0","excluding",{"ecosystem":9,"name":328,"vendor":329,"product":328,"cpe_part":320,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":330},"thrift","apache",[331],{"version":332,"is_range":324,"range_type":333,"version_start":9,"version_start_type":9,"version_end":325,"version_end_type":326,"fixed_in":9},"lt0.23.0","cpe",{"ecosystem":335,"name":328,"vendor":335,"product":328,"cpe_part":9,"purl_type":336,"purl_namespace":9,"purl_name":328,"source":9,"versions":337},"Npm","npm",[338],{"version":339,"is_range":324,"range_type":340,"version_start":9,"version_start_type":9,"version_end":325,"version_end_type":326,"fixed_in":9},"lt0_23_0","semver"]