CVE Intelligence

Apache Software Foundation Commons Configuration vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Apache Software Foundation Commons Configuration: 1 record(s), with affected versions and fixes.
cpe:2.3:a:apache:commons_configuration

CVE-2026-45205 Medium · 5.3 CWE-674 May 14, 2026
Apache Commons Configuration: StackOverflowError for YAML input with cycles
Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles. This issue affects Apache Commons: from 2.2 before 2.15.0. Users are recommended to upgrade to version 2.15.0, which fixes the issue.