Commons Configuration (Apache) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 110 known versions, newest CVE from 2026-05-14. Vendor: Apache.

CVEs of Commons Configuration

• CVE-2026-45205 - CVSS 5.3 (medium), 2026-05-14: Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError…
• CVE-2025-46392 - CVSS 6.5 (medium), 2025-05-09: Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that…
• CVE-2024-29133 - CVSS 5.4 (medium), 2024-03-21: Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1. Users are…
• CVE-2024-29131 - CVSS 7.3 (high), 2024-03-21: Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1. Users are…
• CVE-2022-33980 - CVSS 9.8 (critical), 2022-07-06: Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for…
• CVE-2020-1953 - CVSS 10 (critical), 2020-03-13: Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special…