Apache Commons Configuration

3 results · Clear filters · Feed

• Medium 5.3
  CVE-2026-45205

  Apache Commons Configuration: StackOverflowError for YAML input with cycles

  Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles. This issue affects Apache Commons: from 2.2 before 2.15.0. Users are rec…

  Apache Software Foundation Apache Commons Configuration commons-configuration2 org.apache.commons:commons-configuration2 Debian Ubuntu Maven
  May 14, 2026
• Medium 6.5
  CVE-2025-46392

  Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x

  Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage pat…

  Apache Software Foundation Apache Commons Configuration commons-configuration commons-configuration Debian Ubuntu Maven
  May 9, 2025
• Medium 5.4
  CVE-2024-29133

  Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree

  Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1. Users are recommended to upgrade to version 2.10.1, which fixes the issue.

  Apache Software Foundation Apache Commons Configuration org.apache.commons:commons-configuration2 commons-configuration2 Debian Ubuntu Maven
  Mar 21, 2024