CVE-2026-94638 · Brief

CVEs like CVE-2026-94638

The records whose text reads closest to CVE-2026-94638, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-660550.820
   Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a…

   Same weakness class, CWE-770; same vendor or product family, Apache.

2. CVE-2026-946440.889
   Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound

   Same weakness class, CWE-770; same vendor or product family, Apache.

3. CVE-2026-946560.827
   Apache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size bound

   Same weakness class, CWE-770; same vendor or product family, Apache.

4. CVE-2026-911370.825
   Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements

   Same vendor or product family, Apache.

5. CVE-2026-946350.816
   Apache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name

   Same weakness class, CWE-770; same vendor or product family, Apache.

6. CVE-2026-946480.817
   Apache Thrift: dart `TJsonProtocol`/`TJSONProtocol` has no string size bound

   Same weakness class, CWE-770; same vendor or product family, Apache.

7. CVE-2026-946570.806
   Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound

   Same weakness class, CWE-770; same vendor or product family, Apache.

8. CVE-2026-946340.810
   Apache Thrift: Python `TJSONProtocol` has a string length limit that is off by default

   Same weakness class, CWE-770; same vendor or product family, Apache.

9. CVE-2026-583890.811
   Apache Thrift: Rust binary protocol non-strict path missing string size limit

   Same weakness class, CWE-770; same vendor or product family, Apache.

10. CVE-2026-871170.744
    Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec

    Same vendor or product family, Apache.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 391,954 records. Fetched 2026-10-23.