CVE-2026-120135 — Apache Thrift Java TProtocolUtil.skip() does not limit recursion depth by default

An uncontrolled recursion vulnerability affects the Java bindings of Apache Thrift. The issue affects Apache Thrift versions before 0.24.0.