Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
ECHO-7068-a82e-7936
See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-7068-a82e-7936.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-7068-a82e-7936
Upstream
CVE-2026-94633
Withdrawn
2026-10-05T18:43:47Z
Published
2026-10-03T09:20:14Z
Modified
2026-10-05T19:30:54Z
Summary
Dart-only: TBinaryProtocol.readMessageBegin allocates from the pre-versioned name length. No Dart SDK is in Build-Depends, and no binary package ships lib/dart.
Details
References
https://advisory.echohq.com/cve/CVE-2026-94633
https://advisory.echohq.com/cve/CVE-2026-94633
Affected packages
Echo
/
thrift
Package
Name
thrift
Purl
pkg:deb/echo/thrift
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0.19.0-4
Database specific
source
"https://advisory.echohq.com/osv/ECHO-7068-a82e-7936.json"
ECHO-7068-a82e-7936 - OSV