NVD (NIST)
public full text
Public Domain
CVE-2026-66858 — HIGH 8.7
The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator (the pure-Python protocols are not affected), the PHP library and its thrift_proto
Conceptio Open Archive
Analyze & explore related research in Conceptio
Connect this record directly into your research workflow or AI agent. Explore citations across open repositories, query full text, and export structured proof bundles.
This document is indexed with metadata only: full text is not available in the archive for this record. Open the official source ↗
Related documents
- CVE-2026-102634 — HIGH 8.7#1147616
- Comments on IMP/Host Protocol changes (RFCs 687 and 690)#231835
- Lost in Migration: Exposing Android Framework Vulnerabilities in Parallel Java-Kotlin Implementations#266106
- Constraints on anomalous HVV couplings from the production of Higgs bosons decaying to τ lepton pairs#491911
- PyPitfall: Dependency chaos and supply chain vulnerabilities in Python#407977
Record · ID 1176014
Retrieved via Conceptio: every document is proof-bundled with source, license, and retrieval metadata.
Retrieved via Conceptio: every document is proof-bundled with source, license, and retrieval metadata.
Bring this data into your agent: Connect via MCP or API · 20 free credits to start · no card required
Read the Docs → · View CLI source on GitHub · Conceptio Open Knowledge Archive
Read the Docs → · View CLI source on GitHub · Conceptio Open Knowledge Archive