ECHO-b697-02df-dd87
See a problem?- Import Source
- https://advisory.echohq.com/osv/ECHO-b697-02df-dd87.json
- JSON Data
- https://api.osv.dev/v1/vulns/ECHO-b697-02df-dd87
- Upstream
- CVE-2026-96288
- Withdrawn
- 2026-10-05T18:43:47Z
- Published
- 2026-10-03T09:20:14Z
- Modified
- 2026-10-05T19:30:54Z
- Summary
- Erlang-only: thrift_protocol:read/2 in lib/erl followed struct nesting without a depth limit. The upstream fix (e94803e2) is entirely in the Erlang runtime; generated Erlang code only carries struct_info type descriptors, so thrift-compiler's Erlang generator is unchanged. Built with --without-erlang; no Erlang binary package is produced.
- Details
- References