Please update Apache thrift to 0.23.0 to fix CVE-2026-41602

[glaubitz]

The vendored Apache thrift package is affected by CVE-2026-41602 which was fixed in 0.23.0:

• https://www.cve.org/CVERecord?id=CVE-2026-41602

Please update thrift to version 0.23.0 or higher, to address these vulnerabilities. Thanks!

[github-actions]

This issue was marked stale due to lack of activity.