StackRadar

CVE-2026-43871

High

Advisory

Published 27 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
343
of 17,781 indexed, latest versions
Container images
295
deployed by those charts
Fix available
3 of 3
affected packages

Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop

Carried by container images the latest versions of 343 of 17,781 indexed charts deploy, on 295 images.

Affected packageAffected versionsFixed inImages
github.com/apache/thriftgolangv0.0.0-20151001171628-53dd39833a08, v0.0.0-20161221203622-b2a4d4ae21c7, v0.0.0-20170131211753-2d6060d88206, v0.0.0-20181211084444-2b7365c54f82+15 more0.24.0209
libthriftmaven0.9.0, 0.9.1, 0.9.2, 0.9.3+10 more0.24.062
thriftpypi0.11.0, 0.13.0, 0.15.0, 0.16.0+2 more0.24.025
OSV records
GHSA-8wv5-x4w7-5gww
Also known as
BIT-thrift-2026-43871, PYSEC-2026-3926

Charts affected

343 by stars
ChartLatestAffected imagesRadar Score
opentelemetry-demoopentelemetry-helmVerified publisher0.41.13 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

3 of the 34 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
jaegertracing/jaeger:2.19.0ede4864215be
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

22,420
opikopikOfficialVerified publisher2.2.591 of 13See more

opik opik 2.2.59

1 of the 13 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

14,334
reportportalreportportal-ioOfficialVerified publisher26.8.121 of 15See more

reportportal reportportal-io 26.8.12

1 of the 15 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

11,869
jaeger-collectorromanow-helm-chartsVerified publisher1.5.01 of 1See more

jaeger-collector romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.41.0ff81f0a9f63c
github.com/apache/thrift@v0.17.0
0.24.0

Open the chart page →

1,854
jaeger-queryromanow-helm-chartsVerified publisher1.5.01 of 1See more

jaeger-query romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
jaegertracing/jaeger-query:1.41.0b636f0f464bc
github.com/apache/thrift@v0.17.0
0.24.0

Open the chart page →

1,797
sceptresceptreai0.1.121 of 5See more

sceptre sceptreai 0.1.12

1 of the 5 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
maponyacharles/sceptreai:seaweedfs-0.1.127c8a525f08e9
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

4,369
smallest-self-hostsmallest-self-hostVerified publisher0.2.21 of 12See more

smallest-self-host smallest-self-host 0.2.2

1 of the 12 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/apache/thrift@v0.18.1
0.24.0

Open the chart page →

7,685
aws-otel-collectorsnowplow-devopsVerified publisher0.16.01 of 1See more

aws-otel-collector snowplow-devops 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-otel-collector:v0.49.0d2bdfff2c377
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

153
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/apache/thrift@v0.18.1
0.24.0

Open the chart page →

2,022
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
libthrift@0.14.1
0.24.0

Open the chart page →

24,930
synapsesudermanjr1.1.51 of 1See more

synapse sudermanjr 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
thrift@0.15.0
0.24.0

Open the chart page →

3,332
snowplowt3n0.0.11 of 1See more

snowplow t3n 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
snowplow/scala-stream-collector-pubsub:2.2.041d318841516
libthrift@0.13.0
0.24.0

Open the chart page →

2,269
guardrails-agent-kubernetesturbotVerified publisher0.3.01 of 1See more

guardrails-agent-kubernetes turbot 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
github.com/apache/thrift@v0.16.0
0.24.0

Open the chart page →

4,020
vearchvearch3.3.41 of 4See more

vearch vearch 3.3.4

1 of the 4 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
vearch/vearch:3.3.40768af33f9d9
github.com/apache/thrift@v0.13.0
0.24.0

Open the chart page →

5,008
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
libthrift@0.12.0
0.24.0

Open the chart page →

7,835
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
github.com/apache/thrift@v0.18.1
0.24.0

Open the chart page →

10,090
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

10,323
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
libthrift@0.14.1
0.24.0

Open the chart page →

7,713
airbyteairbyte-v2Verified publisher2.2.02 of 10See more

airbyte airbyte-v2 2.2.0

2 of the 10 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-11-20T22-40-07Zb833a1699b4f
github.com/apache/thrift@v0.19.0
0.24.0
temporalio/auto-setup:1.27.2b44cbfeb43db
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

12,473
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/apache/thrift@v0.16.0
0.24.0

Open the chart page →

28,131
monitoringantmediaVerified publisher1.0.01 of 6See more

monitoring antmedia 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

2,453
apache-iotdbapache-iotdb-single-nodeVerified publisher0.1.01 of 1See more

apache-iotdb apache-iotdb-single-node 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
apache/iotdb:0.11.28647309f95d1
libthrift@0.13.0
0.24.0

Open the chart page →

5,277
accounts-uiappscodeVerified publisher2026.9.111 of 1See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
github.com/apache/thrift@v0.23.0
0.24.0

Open the chart page →

2,592
aceappscodeVerified publisher2026.9.111 of 2See more

ace appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
github.com/apache/thrift@v0.23.0
0.24.0

Open the chart page →

2,894
ace-installerappscodeVerified publisher2026.9.111 of 2See more

ace-installer appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
github.com/apache/thrift@v0.23.0
0.24.0

Open the chart page →

3,225
ace-installer-certifiedappscodeVerified publisher2026.9.111 of 2See more

ace-installer-certified appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
github.com/apache/thrift@v0.23.0
0.24.0

Open the chart page →

3,225
billingappscodeVerified publisher2026.9.111 of 1See more

billing appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
github.com/apache/thrift@v0.23.0
0.24.0

Open the chart page →

2,592
grafanaappscodeVerified publisher2026.9.111 of 1See more

grafana appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/appscode/grafana:v2025.2.367d18880448c
github.com/apache/thrift@v0.14.1
0.24.0

Open the chart page →

2,333
marketplace-apiappscodeVerified publisher2026.9.111 of 1See more

marketplace-api appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
github.com/apache/thrift@v0.23.0
0.24.0

Open the chart page →

2,592
minioappscodeVerified publisher2026.9.111 of 1See more

minio appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
github.com/apache/thrift@v0.17.0
0.24.0

Open the chart page →

4,043
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
github.com/apache/thrift@v0.23.0
0.24.0

Open the chart page →

37,268
otel-collectorarieotechVerified publisher0.1.01 of 1See more

otel-collector arieotech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.154.0b3079f45e19b
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

245
arlas-aiasarlas-stackVerified publisher28.8.02 of 22See more

arlas-aias arlas-stack 28.8.0

2 of the 22 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
github.com/apache/thrift@v0.21.0
0.24.0
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

40,238
assemblylineassemblylineVerified publisher7.4.171 of 12See more

assemblyline assemblyline 7.4.17

1 of the 12 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-01-11T07-46-16Z796f75ea413b
github.com/apache/thrift@v0.19.0
0.24.0

Open the chart page →

12,898
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
libthrift@0.14.1
0.24.0

Open the chart page →

13,352
semantic-repositoryassist-iot-semantic-repository1.1.01 of 3See more

semantic-repository assist-iot-semantic-repository 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

1,069
appmesh-jaegeraws1.0.31 of 1See more

appmesh-jaeger aws 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.2942822be7888b
github.com/apache/thrift@v0.15.0
0.24.0

Open the chart page →

2,480
ragflowbaboulinet0.1.11 of 5See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-12-20T01-00-02Z5702ea361420
github.com/apache/thrift@v0.19.0
0.24.0

Open the chart page →

5,823
bookinfobasictechno0.1.01 of 6See more

bookinfo basictechno 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.17.06668bcf42ef0
thrift@0.11.0
0.24.0

Open the chart page →

20,671
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
thrift@0.13.0
0.24.0

Open the chart page →

22,891
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/apache/thrift@v0.16.0
0.24.0

Open the chart page →

13,459
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
thrift@0.11.0
0.24.0

Open the chart page →

18,980
jaegerbook-k8sinfra-v23.4.04 of 5See more

jaeger book-k8sinfra-v2 3.4.0

4 of the 5 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
github.com/apache/thrift@v0.19.0
0.24.0
jaegertracing/jaeger-collector:1.53.07f1269222903
github.com/apache/thrift@v0.19.0
0.24.0
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
github.com/apache/thrift@v0.19.0
0.24.0
library/cassandra:3.11.65aa8400b4b3b
libthrift@0.9.2
0.24.0

Open the chart page →

19,229
pyroscopebook-k8sinfra-v21.10.01 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

1 of the 3 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/alloy:v1.1.1c3dac4e26471
github.com/apache/thrift@v0.20.0
0.24.0

Open the chart page →

3,244
tempobook-k8sinfra-v21.10.31 of 1See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/tempo:2.5.0f0200a9bff6d
github.com/apache/thrift@v0.20.0
0.24.0

Open the chart page →

1,859
miniobysamioVerified publisher1.0.31 of 1See more

minio bysamio 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

1,069
cassandra-clustercassandra-clusterVerified publisher0.1.01 of 1See more

cassandra-cluster cassandra-cluster 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
library/cassandra:3.11.10b095ff3248c6
libthrift@0.9.2
0.24.0

Open the chart page →

9,473
temporalcastaiVerified publisher0.54.24 of 14See more

temporal castai 0.54.2

4 of the 14 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/apache/thrift@v0.18.1
0.24.0
library/cassandra:3.11.3ce85468c5bad
libthrift@0.9.2
0.24.0
temporalio/admin-tools:1.26.237e2e33dbd7b
github.com/apache/thrift@v0.17.0
0.24.0
temporalio/server:1.26.21e2626efcbc1
github.com/apache/thrift@v0.20.0
0.24.0

Open the chart page →

16,198
catalyst-agentscatalyst-agents0.1.304 of 18See more

catalyst-agents catalyst-agents 0.1.30

4 of the 18 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:13.1.3ab5cb380e3ff
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
grafana/tempo:2.5.0f0200a9bff6d
github.com/apache/thrift@v0.20.0
0.24.0
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
github.com/apache/thrift@v0.13.0
0.24.0

Open the chart page →

15,027
kube-ceemsceemsOfficialVerified publisher1.40.01 of 5See more

kube-ceems ceems 1.40.0

1 of the 5 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

640

Container images carrying it

295 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/apache/thrift@v0.21.0
0.24.0
16
grafana/grafana:latestf772d434e8fa
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
12
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/apache/thrift@v0.21.0
0.24.0
8
library/cassandra:3.11.3ce85468c5bad
libthrift@0.9.2
0.24.0
7
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
github.com/apache/thrift@v0.23.0
0.24.0
7
ghcr.io/quenchworks/images/grafana3ccc56791c8a
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
6
grafana/grafana:13.2.1-distroless3600073f45a9
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
5
bde2020/hive:2.3.2-postgresql-metastore620267768985
libthrift@0.9.3
0.24.0
4
gradiant/hbase-base:2.0.1a1ee6de94c04
libthrift@0.9.3
0.24.0
4
grafana/grafana:13.1.0121a7a9ece6d
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
4
grafana/tempo:2.9.065a578975943
github.com/apache/thrift@v0.22.0
0.24.0
4
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
github.com/apache/thrift@v0.19.0
0.24.0
4
jaegertracing/jaeger-collector:1.53.07f1269222903
github.com/apache/thrift@v0.19.0
0.24.0
4
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
github.com/apache/thrift@v0.19.0
0.24.0
4
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/apache/thrift@v0.21.0
0.24.0
3
dgraph/dgraph:v21.12.03b55ea83fffe
github.com/apache/thrift@v0.12.0
0.24.0
3
grafana/grafana:11.0.00dc5a246ab16
github.com/apache/thrift@v0.18.1
0.24.0
3
grafana/grafana:13.1.17cb8c64c4d57
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
3
jaegertracing/all-in-one:latestab6f1a1f0fb4
github.com/apache/thrift@v0.22.0
0.24.0
3
library/solr:8.11.18c5f7881cebb
libthrift@0.14.1
0.24.0
3
tykio/tyk-dashboard:v5.13.10e03b94c153d
github.com/apache/thrift@v0.23.0
0.24.0
3
tykio/tyk-gateway-ee:v5.13.13e907e675bf9
github.com/apache/thrift@v0.23.0
0.24.0
3
ghcr.io/quenchworks/images/tempo9e889ec33f96
github.com/apache/thrift@v0.23.0
0.24.0
3
quay.io/devtron/clair:4.3.675fb847ac045
github.com/apache/thrift@v0.13.0
0.24.0
3
amancevice/superset:0.35.212a0a9e66550
thrift@0.13.0
0.24.0
2
apache/druid:37.0.00116fb802786
libthrift@0.13.0
0.24.0
2
apache/rocketmq:5.4.0319cd8a81ed1
libthrift@0.15.0
0.24.0
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
libthrift@0.9.3
0.24.0
2
gradiant/spark:2.4.4-python-alpine97657d56e927
libthrift@0.9.3
0.24.0
2
grafana/alloy:v1.8.17790f6f7fbd8
github.com/apache/thrift@v0.21.0
0.24.0
2
grafana/alloy:v1.12.2f94b1c82957a
github.com/apache/thrift@v0.22.0
0.24.0
2
grafana/grafana:11.1.0079600c9517b
github.com/apache/thrift@v0.18.1
0.24.0
2
grafana/grafana:12.3.12175aaa91c96
github.com/apache/thrift@v0.22.0
0.24.0
2
grafana/grafana:11.1.4886b56d5534e
github.com/apache/thrift@v0.18.1
0.24.0
2
grafana/grafana:12.3.39e1e77ade304
github.com/apache/thrift@v0.22.0
0.24.0
2
grafana/grafana:12.4.1e932bd6ed0e0
github.com/apache/thrift@v0.22.0
0.24.0
2
grafana/tempo:2.5.0f0200a9bff6d
github.com/apache/thrift@v0.20.0
0.24.0
2
grafana/tempo:2.10.8f0561deb1c68
github.com/apache/thrift@v0.23.0
0.24.0
2
hashicorp/vault:2.0.45be49781ecf7
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
2
hashicorp/vault:1.15.26b4e5dadf082
github.com/apache/thrift@v0.16.0
0.24.0
2
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
thrift@0.11.0
0.24.0
2
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
thrift@0.11.0
0.24.0
2
jaegertracing/all-in-one:1.3104d224a9999b
github.com/apache/thrift@v0.15.0
0.24.0
2
library/cassandra:3.11.65aa8400b4b3b
libthrift@0.9.2
0.24.0
2
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/apache/thrift@v0.19.0
0.24.0
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/apache/thrift@v0.21.0
0.24.0
2
temporalio/server:1.22.4c0a44c26397b
github.com/apache/thrift@v0.17.0
0.24.0
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
github.com/apache/thrift@v0.13.0
0.24.0
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
github.com/apache/thrift@v0.13.0
0.24.0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.