StackRadar

CVE-2026-43871

High

Advisory

Published 27 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
343
of 17,781 indexed, latest versions
Container images
295
deployed by those charts
Fix available
3 of 3
affected packages

Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop

Carried by container images the latest versions of 343 of 17,781 indexed charts deploy, on 295 images.

Affected packageAffected versionsFixed inImages
github.com/apache/thriftgolangv0.0.0-20151001171628-53dd39833a08, v0.0.0-20161221203622-b2a4d4ae21c7, v0.0.0-20170131211753-2d6060d88206, v0.0.0-20181211084444-2b7365c54f82+15 more0.24.0209
libthriftmaven0.9.0, 0.9.1, 0.9.2, 0.9.3+10 more0.24.062
thriftpypi0.11.0, 0.13.0, 0.15.0, 0.16.0+2 more0.24.025
OSV records
GHSA-8wv5-x4w7-5gww
Also known as
BIT-thrift-2026-43871, PYSEC-2026-3926

Charts affected

343 by stars
ChartLatestAffected imagesRadar Score
tsoragecetic0.4.111 of 8See more

tsorage cetic 0.4.11

1 of the 8 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
library/cassandra:3.11.598531a31f213
libthrift@0.9.2
0.24.0

Open the chart page →

12,018
pathling-serverchglVerified publisher0.10.111 of 3See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

961
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
github.com/apache/thrift@v0.0.0-20181211084444-2b7365c54f82
0.24.0

Open the chart page →

20,900
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
libthrift@0.9.1
0.24.0

Open the chart page →

7,226
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
lightbend/spark-history-server:2.4.00bedf37f428a
libthrift@0.9.3
0.24.0

Open the chart page →

14,066
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
thrift@0.11.0
0.24.0

Open the chart page →

5,060
monitoringcluster-deploy0.3.01 of 11See more

monitoring cluster-deploy 0.3.0

1 of the 11 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
github.com/apache/thrift@v0.22.0
0.24.0

Open the chart page →

8,183
loki-stackcommon-chartsVerified publisher1.0.32 of 12See more

loki-stack common-charts 1.0.3

2 of the 12 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.0491b0578c049
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
grafana/grafana:13.1.17cb8c64c4d57
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

5,329
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
falcosecurity/falcosidekick:2.27.0828ee36cb13a
github.com/apache/thrift@v0.14.2
0.24.0

Open the chart page →

9,146
csghubcsghubVerified publisher2.4.32 of 34See more

csghub csghub 2.4.3

2 of the 34 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/apache/thrift@v0.21.0
0.24.0
temporalio/auto-setup:1.29.7f14912b699cf
github.com/apache/thrift@v0.23.0
0.24.0

Open the chart page →

58,897
cw-container-insightcwci0.7.01 of 1See more

cw-container-insight cwci 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:latest-arm649dea6643715a
github.com/apache/thrift@v0.23.0
0.24.0

Open the chart page →

274
miniod4nVerified publisher5.2.11 of 2See more

minio d4n 5.2.1

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-06-04T19-20-08Zc6b68f158628
github.com/apache/thrift@v0.20.0
0.24.0

Open the chart page →

2,629
grafana-agentdandydev-chartsVerified publisher0.19.21 of 1See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/agent:v0.20.0825c09373d27
github.com/apache/thrift@v0.15.0
0.24.0

Open the chart page →

3,238
dapr-agentsdapr-agents-devVerified publisher0.1.53 of 31See more

dapr-agents dapr-agents-dev 0.1.5

3 of the 31 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
github.com/apache/thrift@v0.22.0
0.24.0
grafana/tempo:2.9.065a578975943
github.com/apache/thrift@v0.22.0
0.24.0
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/apache/thrift@v0.22.0
0.24.0

Open the chart page →

22,193
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
thrift@0.16.0
0.24.0

Open the chart page →

5,062
adot-exporter-for-eks-on-ec2dasmeta-adot0.15.51 of 1See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
github.com/apache/thrift@v0.18.0
0.24.0

Open the chart page →

1,926
monitoring-stackdata354-helmVerified publisher1.4.21 of 4See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

3,176
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
libthrift@0.13.0
0.24.0

Open the chart page →

8,245
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
github.com/apache/thrift@v0.12.0
0.24.0

Open the chart page →

11,909
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/apache/thrift@v0.13.0
0.24.0

Open the chart page →

6,237
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
github.com/apache/thrift@v0.12.0
0.24.0

Open the chart page →

11,909
direktivdirektivVerified publisher0.10.01 of 6See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

3,470
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
libthrift@0.9.3
0.24.0

Open the chart page →

6,147
dnation-kubernetes-monitoring-stackdnationcloud4.0.22 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

2 of the 17 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
github.com/apache/thrift@v0.16.0
0.24.0

Open the chart page →

21,641
temporaldtrdnk-helm-chartsVerified publisher0.35.03 of 13See more

temporal dtrdnk-helm-charts 0.35.0

3 of the 13 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
libthrift@0.9.2
0.24.0
temporalio/admin-tools:1.22.4258958fe2ff2
github.com/apache/thrift@v0.18.1
0.24.0
temporalio/server:1.22.4c0a44c26397b
github.com/apache/thrift@v0.17.0
0.24.0

Open the chart page →

20,205
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
libthrift@0.9.3
0.24.0

Open the chart page →

5,639
kube-ecp-stackemqx-operator2.5.12 of 16See more

kube-ecp-stack emqx-operator 2.5.1

2 of the 16 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
emqxecp/otelcol:2.5.04c31d9bec846
github.com/apache/thrift@v0.20.0
0.24.0
library/telegraf:1.27507a3eecf809
github.com/apache/thrift@v0.18.1
0.24.0

Open the chart page →

23,685
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
github.com/apache/thrift@v0.13.0
0.24.0

Open the chart page →

12,127
fairwinds-insightsfairwinds-stableVerified publisher10.1.102 of 13See more

fairwinds-insights fairwinds-stable 10.1.10

2 of the 13 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.31.2dbc5fcd6ee8f
github.com/apache/thrift@v0.23.0
0.24.0
temporalio/server:1.31.2b5ecdb8282be
github.com/apache/thrift@v0.23.0
0.24.0

Open the chart page →

3,797
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.24 of 18See more

farm-observability farm-observability 0.27.2

4 of the 18 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/alloy:v1.16.384b76d56c594
github.com/apache/thrift@v0.22.0
0.24.0
grafana/alloy:v1.12.2f94b1c82957a
github.com/apache/thrift@v0.22.0
0.24.0
grafana/grafana:13.0.1-security-012d1f9ae67c17
github.com/apache/thrift@v0.22.0
0.24.0
grafana/tempo:2.9.065a578975943
github.com/apache/thrift@v0.22.0
0.24.0

Open the chart page →

13,255
flyteconnectorflyte2.0.01 of 1See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
libthrift@0.16.0
0.24.0

Open the chart page →

3,463
accumulogaffer2.2.11 of 4See more

accumulo gaffer 2.2.1

1 of the 4 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
libthrift@0.12.0
0.24.0

Open the chart page →

16,892
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

11,961
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

11,961
rocketmqgengxiankun-charts0.3.01 of 1See more

rocketmq gengxiankun-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
apache/rocketmq:5.3.0434d8398f996
libthrift@0.14.1
0.24.0

Open the chart page →

4,921
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
libthrift@0.13.0
0.24.0

Open the chart page →

34,754
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/apache/thrift@v0.20.0
0.24.0

Open the chart page →

12,056
gmaas-github-apigmaas-github-api2.0.11 of 1See more

gmaas-github-api gmaas-github-api 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
gmaas2/github-api:latest148fc2d9afe9
thrift@0.16.0
0.24.0

Open the chart page →

1,205
gnp-stackgnp-stack0.0.51 of 14See more

gnp-stack gnp-stack 0.0.5

1 of the 14 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

7,659
jaegergpg-dev3.3.34 of 5See more

jaeger gpg-dev 3.3.3

4 of the 5 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
github.com/apache/thrift@v0.19.0
0.24.0
jaegertracing/jaeger-collector:1.53.07f1269222903
github.com/apache/thrift@v0.19.0
0.24.0
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
github.com/apache/thrift@v0.19.0
0.24.0
library/cassandra:3.11.65aa8400b4b3b
libthrift@0.9.2
0.24.0

Open the chart page →

19,229
kube-prometheus-stackgpg-dev84.0.01 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

1 of the 6 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
github.com/apache/thrift@v0.22.0
0.24.0

Open the chart page →

4,288
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.53.060e65bfffe1f
github.com/apache/thrift@v0.19.0
0.24.0
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

49,025
hivegradiant-bigdataVerified publisher0.1.62 of 5See more

hive gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
libthrift@0.9.3
0.24.0
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
libthrift@0.9.3
0.24.0

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
libthrift@0.9.3
0.24.0

Open the chart page →

6,882
opentsdbgradiant-bigdataVerified publisher0.1.71 of 6See more

opentsdb gradiant-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
libthrift@0.9.3
0.24.0

Open the chart page →

17,511
spark-standalonegradiant-bigdataVerified publisher0.1.01 of 2See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
libthrift@0.9.3
0.24.0

Open the chart page →

6,147
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
github.com/apache/thrift@v0.22.0
0.24.0

Open the chart page →

3,318
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

8,188
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
libthrift@0.12.0
0.24.0

Open the chart page →

4,556
temporalgroundcover1.12.3572 of 2See more

temporal groundcover 1.12.357

2 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260730-1af8cea3b8538
github.com/apache/thrift@v0.23.0
0.24.0
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

2,013

Container images carrying it

295 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/apache/thrift@v0.21.0
0.24.0
16
grafana/grafana:latestf772d434e8fa
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
12
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/apache/thrift@v0.21.0
0.24.0
8
library/cassandra:3.11.3ce85468c5bad
libthrift@0.9.2
0.24.0
7
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
github.com/apache/thrift@v0.23.0
0.24.0
7
ghcr.io/quenchworks/images/grafana3ccc56791c8a
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
6
grafana/grafana:13.2.1-distroless3600073f45a9
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
5
bde2020/hive:2.3.2-postgresql-metastore620267768985
libthrift@0.9.3
0.24.0
4
gradiant/hbase-base:2.0.1a1ee6de94c04
libthrift@0.9.3
0.24.0
4
grafana/grafana:13.1.0121a7a9ece6d
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
4
grafana/tempo:2.9.065a578975943
github.com/apache/thrift@v0.22.0
0.24.0
4
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
github.com/apache/thrift@v0.19.0
0.24.0
4
jaegertracing/jaeger-collector:1.53.07f1269222903
github.com/apache/thrift@v0.19.0
0.24.0
4
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
github.com/apache/thrift@v0.19.0
0.24.0
4
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/apache/thrift@v0.21.0
0.24.0
3
dgraph/dgraph:v21.12.03b55ea83fffe
github.com/apache/thrift@v0.12.0
0.24.0
3
grafana/grafana:11.0.00dc5a246ab16
github.com/apache/thrift@v0.18.1
0.24.0
3
grafana/grafana:13.1.17cb8c64c4d57
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
3
jaegertracing/all-in-one:latestab6f1a1f0fb4
github.com/apache/thrift@v0.22.0
0.24.0
3
library/solr:8.11.18c5f7881cebb
libthrift@0.14.1
0.24.0
3
tykio/tyk-dashboard:v5.13.10e03b94c153d
github.com/apache/thrift@v0.23.0
0.24.0
3
tykio/tyk-gateway-ee:v5.13.13e907e675bf9
github.com/apache/thrift@v0.23.0
0.24.0
3
ghcr.io/quenchworks/images/tempo9e889ec33f96
github.com/apache/thrift@v0.23.0
0.24.0
3
quay.io/devtron/clair:4.3.675fb847ac045
github.com/apache/thrift@v0.13.0
0.24.0
3
amancevice/superset:0.35.212a0a9e66550
thrift@0.13.0
0.24.0
2
apache/druid:37.0.00116fb802786
libthrift@0.13.0
0.24.0
2
apache/rocketmq:5.4.0319cd8a81ed1
libthrift@0.15.0
0.24.0
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
libthrift@0.9.3
0.24.0
2
gradiant/spark:2.4.4-python-alpine97657d56e927
libthrift@0.9.3
0.24.0
2
grafana/alloy:v1.8.17790f6f7fbd8
github.com/apache/thrift@v0.21.0
0.24.0
2
grafana/alloy:v1.12.2f94b1c82957a
github.com/apache/thrift@v0.22.0
0.24.0
2
grafana/grafana:11.1.0079600c9517b
github.com/apache/thrift@v0.18.1
0.24.0
2
grafana/grafana:12.3.12175aaa91c96
github.com/apache/thrift@v0.22.0
0.24.0
2
grafana/grafana:11.1.4886b56d5534e
github.com/apache/thrift@v0.18.1
0.24.0
2
grafana/grafana:12.3.39e1e77ade304
github.com/apache/thrift@v0.22.0
0.24.0
2
grafana/grafana:12.4.1e932bd6ed0e0
github.com/apache/thrift@v0.22.0
0.24.0
2
grafana/tempo:2.5.0f0200a9bff6d
github.com/apache/thrift@v0.20.0
0.24.0
2
grafana/tempo:2.10.8f0561deb1c68
github.com/apache/thrift@v0.23.0
0.24.0
2
hashicorp/vault:2.0.45be49781ecf7
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
2
hashicorp/vault:1.15.26b4e5dadf082
github.com/apache/thrift@v0.16.0
0.24.0
2
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
thrift@0.11.0
0.24.0
2
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
thrift@0.11.0
0.24.0
2
jaegertracing/all-in-one:1.3104d224a9999b
github.com/apache/thrift@v0.15.0
0.24.0
2
library/cassandra:3.11.65aa8400b4b3b
libthrift@0.9.2
0.24.0
2
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/apache/thrift@v0.19.0
0.24.0
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/apache/thrift@v0.21.0
0.24.0
2
temporalio/server:1.22.4c0a44c26397b
github.com/apache/thrift@v0.17.0
0.24.0
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
github.com/apache/thrift@v0.13.0
0.24.0
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
github.com/apache/thrift@v0.13.0
0.24.0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.