CVE-2026-94655

Apache Thrift Lua bindings prior to version 0.25.0 are vulnerable to an inefficient algorithmic complexity issue, allowing for resource allocation without limits or throttling. This can lead to denial-of-service conditions, impacting the availability of applications that rely on these bindings. Organizations using affected versions should prioritize upgrading to 0.25.0 to mitigate potential service disruptions.