diff --git a/advisories/unreviewed/2026/07/GHSA-hwrj-9rr4-24xh/GHSA-hwrj-9rr4-24xh.json b/advisories/unreviewed/2026/07/GHSA-hwrj-9rr4-24xh/GHSA-hwrj-9rr4-24xh.json index dce68b62abc7..8ce819588c19 100644 --- a/advisories/unreviewed/2026/07/GHSA-hwrj-9rr4-24xh/GHSA-hwrj-9rr4-24xh.json +++ b/advisories/unreviewed/2026/07/GHSA-hwrj-9rr4-24xh/GHSA-hwrj-9rr4-24xh.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-hwrj-9rr4-24xh", - "modified": "2026-07-27T12:31:17Z", + "modified": "2026-07-27T12:32:04Z", "published": "2026-07-27T12:31:17Z", "aliases": [ "CVE-2026-66053" ], + "summary": "Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings.", "details": "Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings.\n\nThis issue affects Apache Thrift: before 0.24.0.\n\nUsers are recommended to upgrade to version 0.24.0, which fixes the issue.\n\nThis replaces CVE-2026-41603", "severity": [ { @@ -13,7 +14,27 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "thrift" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.24.0" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY",