Skip to content

Apache Thrift 0.25.0 fixes 61 vulnerabilities

The oss-sec advisory says Apache Thrift 0.25.0 fixes 61 vulnerabilities in earlier versions and recommends upgrading.

By Wendelmaques ·

Source: Apache Thrift 0.25.0: 61 CVEs corrigidas em anúncio conjunto (seclists.org). Text prepared with AI from this source.

What happened and what to do

In an advisory published on October 4, 2026, oss-sec reports that Apache Thrift 0.25.0, released on September 30, fixes 61 vulnerabilities affecting earlier versions. The recommendation is to upgrade to version 0.25.0.

A company can identify where Thrift is installed, check the versions in use, and prioritize updates to affected systems. A dependency inventory and monitoring process can help track the rollout and flag vulnerable versions that remain in production.

How the consultancy can help

Wendelmaques can diagnose exposure to affected versions, define the upgrade scope, and implement inventory, monitoring, and a remediation plan suited to the company’s environment.

Next step

Send a short description of your environment and needs to receive a scoped proposal.

Consulting for your project

Infrastructure review, deployment and ongoing operations, with scope and pricing defined in the proposal.

Quoted per project

Request a proposal