| Bug | buster | bullseye | sid | Description |
|---|
| CVE-2020-13949 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable | In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send sho ... |
| CVE-2019-11939 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable | Golang Facebook Thrift servers would not error upon receiving messages ... |
| CVE-2019-0210 | vulnerable (no DSA) | fixed | fixed | In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJS ... |
| CVE-2019-0205 | vulnerable (no DSA) | fixed | fixed | In Apache Thrift all versions up to and including 0.12.0, a server or ... |