Is github.com/facebook/fbthrift safe to use?

github.com/facebook/fbthrift has 4 known vulnerabilities on the latest version (v0.31.0). DepScope rates its health at 37/100 (critical risk).

What is the latest version of github.com/facebook/fbthrift?

The latest version of github.com/facebook/fbthrift is v0.31.0, released 2015-08-24.

Does github.com/facebook/fbthrift have known vulnerabilities?

Yes. github.com/facebook/fbthrift has 4 known vulnerabilities. See depscope.dev/pkg/go/github.com/facebook/fbthrift for details.

Is github.com/facebook/fbthrift deprecated?

No, github.com/facebook/fbthrift is actively maintained. Latest release: v0.31.0 (2015-08-24).

What are alternatives to github.com/facebook/fbthrift?

DepScope has no curated alternatives for github.com/facebook/fbthrift at this time.

What license does github.com/facebook/fbthrift use?

github.com/facebook/fbthrift is licensed under Apache-2.0.

github.com/facebook/fbthrift

govv0.31.0

Facebook's branch of Apache Thrift, including a new C++ server.

License Apache-2.0permissive9 versions1802 maintainers0 deps2,690 weekly dl

facebook/fbthrift

/ 100

Health

update required

github.com/facebook/[email protected] has vulnerabilities — update to latest

Update to >= 0.31.1-0.20190225164308-c461c1bd1a3e to fix known vulnerabilities

Low health score (37/100)
2 high severity vulnerabilities

Health breakdown0 – 100

0/25

maintenance

6/20

popularity

15/25

security

6/15

maturity

10/15

community

Vulnerabilities

2 high2 low

Advisories (4)

Severity	ID	Summary	Fixed in
high	CVE-2019-11939	Golang Facebook Thrift servers vulnerable to denial of service	0.31.1-0.20200311080807-483ed864d69f
high	CVE-2019-3564	Improper Input Validation and Excessive Iteration in Go Facebook Thrift	0.31.1-0.20190225164308-c461c1bd1a3e
unknown	CVE-2019-11939	Denial of service via malicious message size declaration in github.com/facebook/fbthrift	0.31.1-0.20200311080807-483ed864d69f
unknown	CVE-2019-3564	Denial of service via ignored unknown fields in github.com/facebook/fbthrift	0.31.1-0.20190225164308-c461c1bd1a3e

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/facebook/fbthrift

Last updated · 2015-08-24T20:47:32Z