Vulnerability Description
Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.
Related Weaknesses (CWE)
References
- https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1
- https://lists.apache.org/thread/bf12g1b11r4x9x3wsy4mgwfgd0t779h7
FAQ
What is CVE-2026-91137?
CVE-2026-91137 is a documented vulnerability. Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. This issue affects Apache ...
How severe is CVE-2026-91137?
CVSS scoring is not yet available for CVE-2026-91137. Check NVD for updates.
Is there a patch for CVE-2026-91137?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.