Vulnerabilidades do Apache Software Foundation Commons Configuration

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Apache Software Foundation Commons Configuration: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:apache:commons_configuration

CVE-2026-45205 Média · 5.3 CWE-674 14/05/2026

Apache Commons Configuration: StackOverflowError for YAML input with cycles

Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles. This issue affects Apache Commons: from 2.2 before 2.15.0. Users are recommended to upgrade to version 2.15.0, which fixes the issue.