diff --git a/advisories/unreviewed/2026/07/GHSA-8wv5-x4w7-5gww/GHSA-8wv5-x4w7-5gww.json b/advisories/unreviewed/2026/07/GHSA-8wv5-x4w7-5gww/GHSA-8wv5-x4w7-5gww.json index 5af4af200b75..58a367b231bc 100644 --- a/advisories/unreviewed/2026/07/GHSA-8wv5-x4w7-5gww/GHSA-8wv5-x4w7-5gww.json +++ b/advisories/unreviewed/2026/07/GHSA-8wv5-x4w7-5gww/GHSA-8wv5-x4w7-5gww.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-8wv5-x4w7-5gww", - "modified": "2026-07-27T21:31:21Z", + "modified": "2026-08-27T11:36:32Z", "published": "2026-07-27T12:31:16Z", "aliases": [ "CVE-2026-43871" @@ -17,7 +17,84 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "thrift" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "< 0.24.0" + } + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/apache/thrift" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "< 0.24.0" + } + }, + { + "package": { + "ecosystem": "Packagist", + "name": "apache/thrift" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "< 0.24.0" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.thrift:libthrift" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "< 0.24.0" + } + } + ], "references": [ { "type": "ADVISORY", @@ -34,6 +111,10 @@ { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2026/07/24/33" + }, + { + "type": "PACKAGE", + "url": "https://github.com/apache/thrift" } ], "database_specific": {