Apache · Apache Thrift · CVE-2026-41636
**Name of the Vulnerable Software and Affected Versions**
Apache Thrift versions prior to 0.23.0
**Description**
Uncontrolled Recursion occurs in the Node.js bindings of Apache Thrift. Uncontrolled recursion is a condition where a function calls itself without a proper termination condition, potentially leading to a stack overflow and application crash.
**Recommendations**
Upgrade to version 0.23.0.