StackRadar

CVE-2026-43871

High

Advisory

Published 27 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
343
of 17,781 indexed, latest versions
Container images
295
deployed by those charts
Fix available
3 of 3
affected packages

Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop

Carried by container images the latest versions of 343 of 17,781 indexed charts deploy, on 295 images.

Affected packageAffected versionsFixed inImages
github.com/apache/thriftgolangv0.0.0-20151001171628-53dd39833a08, v0.0.0-20161221203622-b2a4d4ae21c7, v0.0.0-20170131211753-2d6060d88206, v0.0.0-20181211084444-2b7365c54f82+15 more0.24.0209
libthriftmaven0.9.0, 0.9.1, 0.9.2, 0.9.3+10 more0.24.062
thriftpypi0.11.0, 0.13.0, 0.15.0, 0.16.0+2 more0.24.025
OSV records
GHSA-8wv5-x4w7-5gww
Also known as
BIT-thrift-2026-43871, PYSEC-2026-3926

Charts affected

343 by stars
ChartLatestAffected imagesRadar Score
coder-observabilitycoder-observabilityVerified publisher0.7.32 of 21See more

coder-observability coder-observability 0.7.3

2 of the 21 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/agent:v0.40.3f6cbec9409be
github.com/apache/thrift@v0.19.0
0.24.0
quay.io/minio/minio:RELEASE.2022-09-17T00-09-45Zc3d20bc2ea08
github.com/apache/thrift@v0.16.0
0.24.0

Open the chart page →

24,700
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

28,839
hivedmwm-bigdataVerified publisher0.1.62 of 5See more

hive dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
libthrift@0.9.3
0.24.0
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
libthrift@0.9.3
0.24.0

Open the chart page →

20,837
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
libthrift@0.16.0
0.24.0

Open the chart page →

4,641
rocketmqgin1.1.01 of 2See more

rocketmq gin 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
apache/rocketmq:4.9.35ac2a4e0f627
libthrift@0.14.1
0.24.0

Open the chart page →

9,154
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
libthrift@0.9.3
0.24.0

Open the chart page →

7,335
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.28cfde8170c92f
github.com/apache/thrift@v0.17.0
0.24.0

Open the chart page →

30,816
kraken-cikraken-ciVerified publisher1.7.361 of 10See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
github.com/apache/thrift@v0.16.0
0.24.0

Open the chart page →

7,273
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
github.com/apache/thrift@v0.16.0
0.24.0

Open the chart page →

17,693
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
thrift@0.22.0
0.24.0

Open the chart page →

107,811
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-07-23T15-54-02Zd249d1fb6966
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

13,521
rocketmq-clusterrocketmq12.6.01 of 2See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
libthrift@0.15.0
0.24.0

Open the chart page →

6,328
bentoself-hosters-by-nightVerified publisher0.9.11 of 1See more

bento self-hosters-by-night 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/warpstreamlabs/bento:1.8.121715979aefa
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

1,046
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
libthrift@0.9.3
0.24.0

Open the chart page →

8,198
miniosolidchartsVerified publisher0.5.01 of 1See more

minio solidcharts 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/coollabsio/minio:RELEASE.2025-10-15T17-29-55Z69b55a1c1c5d
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

1,055
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
github.com/apache/thrift@v0.19.0
0.24.0

Open the chart page →

28,534
traefik-meshtraefikOfficialVerified publisher4.1.11 of 7See more

traefik-mesh traefik 4.1.1

1 of the 7 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.18db45c07f2e1b
github.com/apache/thrift@v0.0.0-20151001171628-53dd39833a08
0.24.0

Open the chart page →

9,257
uptraceuptrace2.0.21 of 2See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
uptrace/uptrace:2.0.234a02c3b2d12
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

1,619
vaultvaultVerified publisher1.22.01 of 4See more

vault vault 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.1755355002715
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

4,243
agentareaagentareaVerified publisher0.0.181 of 16See more

agentarea agentarea 0.0.18

1 of the 16 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
temporalio/auto-setup:1.29.15b3502a3b685
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

14,914
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
libthrift@0.14.0
0.24.0

Open the chart page →

7,740
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
libthrift@0.9.2
0.24.0

Open the chart page →

17,896
finops-stackcert-managerVerified publisher0.0.51 of 12See more

finops-stack cert-manager 0.0.5

1 of the 12 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:11.1.3b23b588cf7cb
github.com/apache/thrift@v0.18.1
0.24.0

Open the chart page →

12,562
grafanacloudposse0.2.61 of 1See more

grafana cloudposse 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

720
cryptlex-enterprisecryptlex3.21.251 of 8See more

cryptlex-enterprise cryptlex 3.21.25

1 of the 8 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-03-12T18-04-18Z46b3009bf704
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

2,345
clairdevtron0.1.141 of 2See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/apache/thrift@v0.13.0
0.24.0

Open the chart page →

6,237
hbasedmwm-bigdataVerified publisher0.1.61 of 5See more

hbase dmwm-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
libthrift@0.9.3
0.24.0

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
libthrift@0.9.3
0.24.0

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.71 of 6See more

opentsdb dmwm-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
libthrift@0.9.3
0.24.0

Open the chart page →

17,511
elchi-stackelchi1.13.02 of 10See more

elchi-stack elchi 1.13.0

2 of the 10 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:12.2.074144189b384
github.com/apache/thrift@v0.21.0
0.24.0
otel/opentelemetry-collector-contrib:0.89.0995f17004231
github.com/apache/thrift@v0.19.0
0.24.0

Open the chart page →

15,383
otel-collectorgeek-cookbookVerified publisher1.2.21 of 1See more

otel-collector geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/apache/thrift@v0.16.0
0.24.0

Open the chart page →

2,556
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

15,562
temporalglasskubeVerified publisher0.45.2-gk.14 of 14See more

temporal glasskube 0.45.2-gk.1

4 of the 14 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/apache/thrift@v0.18.1
0.24.0
library/cassandra:3.11.3ce85468c5bad
libthrift@0.9.2
0.24.0
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
github.com/apache/thrift@v0.20.0
0.24.0
temporalio/server:1.25.08a5798191dea
github.com/apache/thrift@v0.16.0
0.24.0

Open the chart page →

16,346
hbasegradiant-bigdataVerified publisher0.1.61 of 5See more

hbase gradiant-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
libthrift@0.9.3
0.24.0

Open the chart page →

13,392
meta-monitoringgrafana1.3.01 of 2See more

meta-monitoring grafana 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/alloy:v1.4.306bdcbb51fc2
github.com/apache/thrift@v0.20.0
0.24.0

Open the chart page →

3,518
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
libthrift@0.13.0
0.24.0

Open the chart page →

6,165
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
thrift@0.16.0
0.24.0

Open the chart page →

12,397
supersetinseefrlab1.4.01 of 4See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
thrift@0.13.0
0.24.0

Open the chart page →

7,129
joylive-injectorjoyliveOfficialVerified publisher1.3.51 of 2See more

joylive-injector joylive 1.3.5

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.100.09e36620d6c2c
github.com/apache/thrift@v0.20.0
0.24.0

Open the chart page →

1,273
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.324 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

4 of the 17 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/alloy:v1.14.0f50931848bd8
github.com/apache/thrift@v0.22.0
0.24.0
grafana/grafana:12.3.12175aaa91c96
github.com/apache/thrift@v0.22.0
0.24.0
grafana/tempo:2.9.065a578975943
github.com/apache/thrift@v0.22.0
0.24.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

15,418
kokukokuVerified publisher1.0.02 of 7See more

koku koku 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
libthrift@0.9.3
0.24.0
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

12,019
kubebrowsekubebrowse1.7.01 of 5See more

kubebrowse kubebrowse 1.7.0

1 of the 5 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

4,141
mesherykubesphere-stable0.5.06 of 13See more

meshery kubesphere-stable 0.5.0

6 of the 13 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
layer5/meshery-app-mesh:stable-latest77d59943b3d6
github.com/apache/thrift@v0.13.0
0.24.0
layer5/meshery-kuma:stable-latest9d25f029a8a2
github.com/apache/thrift@v0.13.0
0.24.0
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
github.com/apache/thrift@v0.13.0
0.24.0
layer5/meshery-nsm:stable-latestebd6a8faf21f
github.com/apache/thrift@v0.13.0
0.24.0
layer5/meshery-osm:stable-latestec898e5786c6
github.com/apache/thrift@v0.13.0
0.24.0
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
github.com/apache/thrift@v0.13.0
0.24.0

Open the chart page →

24,690
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
libthrift@0.14.1
0.24.0

Open the chart page →

7,710
lgtmlgtmVerified publisher0.24.02 of 9See more

lgtm lgtm 0.24.0

2 of the 9 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:13.2.0-distroless08e6ab6d67a5
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
grafana/tempo:2.10.8f0561deb1c68
github.com/apache/thrift@v0.23.0
0.24.0

Open the chart page →

1,008
lgtm-stacklgtm-stackVerified publisher0.1.34 of 8See more

lgtm-stack lgtm-stack 0.1.3

4 of the 8 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.10f4434c92b3e
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
grafana/grafana:13.1.0121a7a9ece6d
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
grafana/tempo:2.10.8f0561deb1c68
github.com/apache/thrift@v0.23.0
0.24.0
minio/minio:RELEASE.2024-01-18T22-51-28Z551682a57a94
github.com/apache/thrift@v0.19.0
0.24.0

Open the chart page →

5,576
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge2 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

2 of the 4 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.3104d224a9999b
github.com/apache/thrift@v0.15.0
0.24.0
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/apache/thrift@v0.18.1
0.24.0

Open the chart page →

4,389
plane-enterprisemakeplaneOfficialVerified publisher3.7.11 of 13See more

plane-enterprise makeplane 3.7.1

1 of the 13 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

4,942
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

4,137
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2023.12.230b60b6565ab2
github.com/apache/thrift@v0.19.0
0.24.0

Open the chart page →

37,373

Container images carrying it

295 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/apache/thrift@v0.21.0
0.24.0
16
grafana/grafana:latestf772d434e8fa
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
12
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/apache/thrift@v0.21.0
0.24.0
8
library/cassandra:3.11.3ce85468c5bad
libthrift@0.9.2
0.24.0
7
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
github.com/apache/thrift@v0.23.0
0.24.0
7
ghcr.io/quenchworks/images/grafana3ccc56791c8a
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
6
grafana/grafana:13.2.1-distroless3600073f45a9
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
5
bde2020/hive:2.3.2-postgresql-metastore620267768985
libthrift@0.9.3
0.24.0
4
gradiant/hbase-base:2.0.1a1ee6de94c04
libthrift@0.9.3
0.24.0
4
grafana/grafana:13.1.0121a7a9ece6d
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
4
grafana/tempo:2.9.065a578975943
github.com/apache/thrift@v0.22.0
0.24.0
4
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
github.com/apache/thrift@v0.19.0
0.24.0
4
jaegertracing/jaeger-collector:1.53.07f1269222903
github.com/apache/thrift@v0.19.0
0.24.0
4
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
github.com/apache/thrift@v0.19.0
0.24.0
4
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/apache/thrift@v0.21.0
0.24.0
3
dgraph/dgraph:v21.12.03b55ea83fffe
github.com/apache/thrift@v0.12.0
0.24.0
3
grafana/grafana:11.0.00dc5a246ab16
github.com/apache/thrift@v0.18.1
0.24.0
3
grafana/grafana:13.1.17cb8c64c4d57
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
3
jaegertracing/all-in-one:latestab6f1a1f0fb4
github.com/apache/thrift@v0.22.0
0.24.0
3
library/solr:8.11.18c5f7881cebb
libthrift@0.14.1
0.24.0
3
tykio/tyk-dashboard:v5.13.10e03b94c153d
github.com/apache/thrift@v0.23.0
0.24.0
3
tykio/tyk-gateway-ee:v5.13.13e907e675bf9
github.com/apache/thrift@v0.23.0
0.24.0
3
ghcr.io/quenchworks/images/tempo9e889ec33f96
github.com/apache/thrift@v0.23.0
0.24.0
3
quay.io/devtron/clair:4.3.675fb847ac045
github.com/apache/thrift@v0.13.0
0.24.0
3
amancevice/superset:0.35.212a0a9e66550
thrift@0.13.0
0.24.0
2
apache/druid:37.0.00116fb802786
libthrift@0.13.0
0.24.0
2
apache/rocketmq:5.4.0319cd8a81ed1
libthrift@0.15.0
0.24.0
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
libthrift@0.9.3
0.24.0
2
gradiant/spark:2.4.4-python-alpine97657d56e927
libthrift@0.9.3
0.24.0
2
grafana/alloy:v1.8.17790f6f7fbd8
github.com/apache/thrift@v0.21.0
0.24.0
2
grafana/alloy:v1.12.2f94b1c82957a
github.com/apache/thrift@v0.22.0
0.24.0
2
grafana/grafana:11.1.0079600c9517b
github.com/apache/thrift@v0.18.1
0.24.0
2
grafana/grafana:12.3.12175aaa91c96
github.com/apache/thrift@v0.22.0
0.24.0
2
grafana/grafana:11.1.4886b56d5534e
github.com/apache/thrift@v0.18.1
0.24.0
2
grafana/grafana:12.3.39e1e77ade304
github.com/apache/thrift@v0.22.0
0.24.0
2
grafana/grafana:12.4.1e932bd6ed0e0
github.com/apache/thrift@v0.22.0
0.24.0
2
grafana/tempo:2.5.0f0200a9bff6d
github.com/apache/thrift@v0.20.0
0.24.0
2
grafana/tempo:2.10.8f0561deb1c68
github.com/apache/thrift@v0.23.0
0.24.0
2
hashicorp/vault:2.0.45be49781ecf7
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
2
hashicorp/vault:1.15.26b4e5dadf082
github.com/apache/thrift@v0.16.0
0.24.0
2
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
thrift@0.11.0
0.24.0
2
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
thrift@0.11.0
0.24.0
2
jaegertracing/all-in-one:1.3104d224a9999b
github.com/apache/thrift@v0.15.0
0.24.0
2
library/cassandra:3.11.65aa8400b4b3b
libthrift@0.9.2
0.24.0
2
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/apache/thrift@v0.19.0
0.24.0
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/apache/thrift@v0.21.0
0.24.0
2
temporalio/server:1.22.4c0a44c26397b
github.com/apache/thrift@v0.17.0
0.24.0
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
github.com/apache/thrift@v0.13.0
0.24.0
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
github.com/apache/thrift@v0.13.0
0.24.0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.