Package · Debian

commons-configuration2

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.3

CVE-2026-45205

Apache Commons Configuration: StackOverflowError for YAML input with cycles

Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles. This issue affects Apache Commons: from 2.2 before 2.15.0. Users are rec…

Apache Software Foundation Apache Commons Configuration commons-configuration2 org.apache.commons:commons-configuration2 Debian Ubuntu Maven

May 14, 2026
Medium 5.4

CVE-2024-29133

Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1. Users are recommended to upgrade to version 2.10.1, which fixes the issue.

Apache Software Foundation Apache Commons Configuration commons-configuration2 commons-configuration2 Debian Ubuntu Maven

Mar 21, 2024