CVE-2016-5397
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0.
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for thrift-compiler in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0.
Check your installed stack and versions against the current vulnerability feeds.