CVE-2026-61374

Apache Thrift Java bindings prior to version 0.25.0 are vulnerable to an allocation of resources without limits or throttling, potentially leading to resource exhaustion and denial of service. Organizations utilizing affected versions should prioritize upgrading to 0.25.0 to mitigate this high-severity risk. This vulnerability is particularly critical for developers and system administrators managing applications that rely on Apache Thrift.