StackRadar

CVE-2026-43871

High

Advisory

Published 27 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
343
of 17,781 indexed, latest versions
Container images
295
deployed by those charts
Fix available
3 of 3
affected packages

Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop

Carried by container images the latest versions of 343 of 17,781 indexed charts deploy, on 295 images.

Affected packageAffected versionsFixed inImages
github.com/apache/thriftgolangv0.0.0-20151001171628-53dd39833a08, v0.0.0-20161221203622-b2a4d4ae21c7, v0.0.0-20170131211753-2d6060d88206, v0.0.0-20181211084444-2b7365c54f82+15 more0.24.0209
libthriftmaven0.9.0, 0.9.1, 0.9.2, 0.9.3+10 more0.24.062
thriftpypi0.11.0, 0.13.0, 0.15.0, 0.16.0+2 more0.24.025
OSV records
GHSA-8wv5-x4w7-5gww
Also known as
BIT-thrift-2026-43871, PYSEC-2026-3926

Charts affected

343 by stars
ChartLatestAffected imagesRadar Score
dependency-tracknovum-rgi-charts0.1.81 of 2See more

dependency-track novum-rgi-charts 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
owasp/dependency-track:3.8.0efc65e702ee1
libthrift@0.13.0
0.24.0

Open the chart page →

3,633
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:12.1.1a1701c218024
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

17,070
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
libthrift@0.9.3
0.24.0

Open the chart page →

8,540
one-green-coreone-green-coreVerified publisher0.0.71 of 8See more

one-green-core one-green-core 0.0.7

1 of the 8 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
library/telegraf:1.20.428e98eece020
github.com/apache/thrift@v0.15.0
0.24.0

Open the chart page →

9,558
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
libthrift@0.9.3
0.24.0

Open the chart page →

88,546
omec-control-planeopencord0.1.312 of 8See more

omec-control-plane opencord 0.1.31

2 of the 8 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
library/cassandra:2.1.20cb079c0d7a57
libthrift@0.9.2
0.24.0
omecproject/c3po-hssdb:master-latest28a90cc26716
libthrift@0.9.2
0.24.0

Open the chart page →

40,715
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
libthrift@0.9.3
0.24.0

Open the chart page →

38,865
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
github.com/apache/thrift@v0.22.0
0.24.0

Open the chart page →

5,017
minioopenobserve5.0.71 of 2See more

minio openobserve 5.0.7

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
github.com/apache/thrift@v0.17.0
0.24.0

Open the chart page →

7,459
exporteropenshift1.0.471 of 3See more

exporter openshift 1.0.47

1 of the 3 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
github.com/apache/thrift@v0.16.0
0.24.0

Open the chart page →

13,000
pgaot-container-kit1.0.31 of 6See more

pga ot-container-kit 1.0.3

1 of the 6 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
github.com/apache/thrift@v0.18.1
0.24.0

Open the chart page →

5,137
tempo-standaloneot-container-kit1.0.11 of 1See more

tempo-standalone ot-container-kit 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
quay.io/opstree/tempo:2.10.4-debian13cb734024b3fd
github.com/apache/thrift@v0.22.0
0.24.0

Open the chart page →

588
vmot-container-kit0.0.31 of 7See more

vm ot-container-kit 0.0.3

1 of the 7 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
github.com/apache/thrift@v0.18.1
0.24.0

Open the chart page →

5,411
vm-standaloneot-container-kit0.0.41 of 6See more

vm-standalone ot-container-kit 0.0.4

1 of the 6 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
quay.io/opstree/grafana:12.4.3b61c1ed2f015
github.com/apache/thrift@v0.22.0
0.24.0

Open the chart page →

3,378
adotowan-charts0.1.01 of 1See more

adot owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

1,016
minioowan-charts0.1.21 of 2See more

minio owan-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
cleanstart/minio:latest544bdb8811e1
github.com/apache/thrift@v0.23.0
0.24.0

Open the chart page →

953
parcaparca-rr0.1.01 of 2See more

parca parca-rr 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.24.23776500fde82
github.com/apache/thrift@v0.22.0
0.24.0

Open the chart page →

2,366
pax-prometheuspaxtecnologia0.7.01 of 8See more

pax-prometheus paxtecnologia 0.7.0

1 of the 8 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

1,826
pet-battle-nsffpetbattle0.0.21 of 4See more

pet-battle-nsff petbattle 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

3,678
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
libthrift@0.9.3
0.24.0

Open the chart page →

9,606
cdmswebapppyalive-cdmswebappVerified publisher0.1.01 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
sarwansharma/minio:v359d1da9385d1
github.com/apache/thrift@v0.15.0
0.24.0

Open the chart page →

6,668
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

6,525
cadencequench-cadenceVerified publisher0.0.101 of 2See more

cadence quench-cadence 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/cadencedigest-pinnede45a5fcdf1a4
github.com/apache/thrift@v0.23.0
0.24.0

Open the chart page →

132
grafanaquench-grafanaVerified publisher0.0.121 of 1See more

grafana quench-grafana 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

119
harbor-observabilityquench-harbor-observabilityVerified publisher0.0.101 of 2See more

harbor-observability quench-harbor-observability 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

182
lgtm-stackquench-lgtm-stackVerified publisher0.0.192 of 9See more

lgtm-stack quench-lgtm-stack 0.0.19

2 of the 9 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
ghcr.io/quenchworks/images/tempodigest-pinned9e889ec33f96
github.com/apache/thrift@v0.23.0
0.24.0

Open the chart page →

376
logging-stackquench-logging-stackVerified publisher0.0.121 of 3See more

logging-stack quench-logging-stack 0.0.12

1 of the 3 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

190
observability-stackquench-observability-stackVerified publisher0.0.141 of 5See more

observability-stack quench-observability-stack 0.0.14

1 of the 5 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

267
seaweedfsquench-seaweedfsVerified publisher0.0.191 of 1See more

seaweedfs quench-seaweedfs 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/seaweedfsdigest-pinned951b548eff6a
github.com/apache/thrift@v0.23.0
0.24.0

Open the chart page →

82
tempoquench-tempoVerified publisher0.0.151 of 1See more

tempo quench-tempo 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/tempodigest-pinned9e889ec33f96
github.com/apache/thrift@v0.23.0
0.24.0

Open the chart page →

83
tracing-stackquench-tracing-stackVerified publisher0.0.92 of 3See more

tracing-stack quench-tracing-stack 0.0.9

2 of the 3 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
ghcr.io/quenchworks/images/tempodigest-pinned9e889ec33f96
github.com/apache/thrift@v0.23.0
0.24.0

Open the chart page →

283
vaultquench-vaultVerified publisher0.0.51 of 1See more

vault quench-vault 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vaultdigest-pinnedbdb973c03a64
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

78
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
libthrift@0.20.0
0.24.0

Open the chart page →

21,211
radar-grafanaradar-baseVerified publisher0.1.41 of 2See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:11.6.062d2b9d20a19
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

1,667
bookinforgnu1.0.01 of 7See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
thrift@0.11.0
0.24.0

Open the chart page →

20,462
istio-bookinforgnu1.0.21 of 7See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
thrift@0.11.0
0.24.0

Open the chart page →

20,462
fleet-vendoredrock8sVerified publisher6.5.11 of 1See more

fleet-vendored rock8s 6.5.1

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
fleetdm/fleet:v4.66.012e644b7f40e
github.com/apache/thrift@v0.18.1
0.24.0

Open the chart page →

1,581
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
thrift@0.16.0
0.24.0

Open the chart page →

9,256
monitoringrocketchat-server0.0.171 of 9See more

monitoring rocketchat-server 0.0.17

1 of the 9 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
github.com/apache/thrift@v0.22.0
0.24.0

Open the chart page →

6,859
jaegerromanow-helm-chartsVerified publisher1.7.31 of 1See more

jaeger romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
jaegertracing/jaeger:2.9.0e128b9adbb29
github.com/apache/thrift@v0.22.0
0.24.0

Open the chart page →

1,597
clairromholdings0.1.141 of 2See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/apache/thrift@v0.13.0
0.24.0

Open the chart page →

6,237
dgraphromholdings0.0.201 of 1See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
github.com/apache/thrift@v0.12.0
0.24.0

Open the chart page →

11,909
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

7,436
runwhen-localrunwhen-contribVerified publisher0.6.171 of 3See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.153.06ed874ea083d
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

3,707
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0

Open the chart page →

12,668
grafanasb-helm-charts0.4.01 of 1See more

grafana sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/grafana:12.2.22ebef928d7e5
github.com/apache/thrift@v0.21.0
0.24.0

Open the chart page →

1,795
opentelemetry-collectorsb-helm-charts0.3.01 of 1See more

opentelemetry-collector sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/apache/thrift@v0.19.0
0.24.0

Open the chart page →

1,721
temposb-helm-charts0.4.01 of 1See more

tempo sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
grafana/tempo:2.9.065a578975943
github.com/apache/thrift@v0.22.0
0.24.0

Open the chart page →

923
ed-traefikscaleway-charts0.2.01 of 1See more

ed-traefik scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
library/traefik:v1.7.345d47b7bb2546
github.com/apache/thrift@v0.12.0
0.24.0

Open the chart page →

2,133
seldon-deployseldon1.4.01 of 2See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-43871.

Container imageDigestPackageFixed in
seldonio/seldon-request-logger:1.11.24e985d2006a8
thrift@0.15.0
0.24.0

Open the chart page →

21,997

Container images carrying it

295 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/apache/thrift@v0.21.0
0.24.0
16
grafana/grafana:latestf772d434e8fa
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
12
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/apache/thrift@v0.21.0
0.24.0
8
library/cassandra:3.11.3ce85468c5bad
libthrift@0.9.2
0.24.0
7
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
github.com/apache/thrift@v0.23.0
0.24.0
7
ghcr.io/quenchworks/images/grafana3ccc56791c8a
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
6
grafana/grafana:13.2.1-distroless3600073f45a9
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
5
bde2020/hive:2.3.2-postgresql-metastore620267768985
libthrift@0.9.3
0.24.0
4
gradiant/hbase-base:2.0.1a1ee6de94c04
libthrift@0.9.3
0.24.0
4
grafana/grafana:13.1.0121a7a9ece6d
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
4
grafana/tempo:2.9.065a578975943
github.com/apache/thrift@v0.22.0
0.24.0
4
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
github.com/apache/thrift@v0.19.0
0.24.0
4
jaegertracing/jaeger-collector:1.53.07f1269222903
github.com/apache/thrift@v0.19.0
0.24.0
4
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
github.com/apache/thrift@v0.19.0
0.24.0
4
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/apache/thrift@v0.21.0
0.24.0
3
dgraph/dgraph:v21.12.03b55ea83fffe
github.com/apache/thrift@v0.12.0
0.24.0
3
grafana/grafana:11.0.00dc5a246ab16
github.com/apache/thrift@v0.18.1
0.24.0
3
grafana/grafana:13.1.17cb8c64c4d57
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
3
jaegertracing/all-in-one:latestab6f1a1f0fb4
github.com/apache/thrift@v0.22.0
0.24.0
3
library/solr:8.11.18c5f7881cebb
libthrift@0.14.1
0.24.0
3
tykio/tyk-dashboard:v5.13.10e03b94c153d
github.com/apache/thrift@v0.23.0
0.24.0
3
tykio/tyk-gateway-ee:v5.13.13e907e675bf9
github.com/apache/thrift@v0.23.0
0.24.0
3
ghcr.io/quenchworks/images/tempo9e889ec33f96
github.com/apache/thrift@v0.23.0
0.24.0
3
quay.io/devtron/clair:4.3.675fb847ac045
github.com/apache/thrift@v0.13.0
0.24.0
3
amancevice/superset:0.35.212a0a9e66550
thrift@0.13.0
0.24.0
2
apache/druid:37.0.00116fb802786
libthrift@0.13.0
0.24.0
2
apache/rocketmq:5.4.0319cd8a81ed1
libthrift@0.15.0
0.24.0
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
libthrift@0.9.3
0.24.0
2
gradiant/spark:2.4.4-python-alpine97657d56e927
libthrift@0.9.3
0.24.0
2
grafana/alloy:v1.8.17790f6f7fbd8
github.com/apache/thrift@v0.21.0
0.24.0
2
grafana/alloy:v1.12.2f94b1c82957a
github.com/apache/thrift@v0.22.0
0.24.0
2
grafana/grafana:11.1.0079600c9517b
github.com/apache/thrift@v0.18.1
0.24.0
2
grafana/grafana:12.3.12175aaa91c96
github.com/apache/thrift@v0.22.0
0.24.0
2
grafana/grafana:11.1.4886b56d5534e
github.com/apache/thrift@v0.18.1
0.24.0
2
grafana/grafana:12.3.39e1e77ade304
github.com/apache/thrift@v0.22.0
0.24.0
2
grafana/grafana:12.4.1e932bd6ed0e0
github.com/apache/thrift@v0.22.0
0.24.0
2
grafana/tempo:2.5.0f0200a9bff6d
github.com/apache/thrift@v0.20.0
0.24.0
2
grafana/tempo:2.10.8f0561deb1c68
github.com/apache/thrift@v0.23.0
0.24.0
2
hashicorp/vault:2.0.45be49781ecf7
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
2
hashicorp/vault:1.15.26b4e5dadf082
github.com/apache/thrift@v0.16.0
0.24.0
2
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
thrift@0.11.0
0.24.0
2
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
thrift@0.11.0
0.24.0
2
jaegertracing/all-in-one:1.3104d224a9999b
github.com/apache/thrift@v0.15.0
0.24.0
2
library/cassandra:3.11.65aa8400b4b3b
libthrift@0.9.2
0.24.0
2
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
github.com/apache/thrift@v0.23.1-0.20260429145742-d2acd3c49e58
0.24.0
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/apache/thrift@v0.19.0
0.24.0
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/apache/thrift@v0.21.0
0.24.0
2
temporalio/server:1.22.4c0a44c26397b
github.com/apache/thrift@v0.17.0
0.24.0
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
github.com/apache/thrift@v0.13.0
0.24.0
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
github.com/apache/thrift@v0.13.0
0.24.0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.