apache/commons-configuration

apache/commons-configuration

GitHubGitHub
GitHubgithub.com
commons.apache.orgcommons.apache.org
Releases96
Frequency2 months 1 week
Last Release
Stars213
Apache Commons Configuration
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2026-45205↗
5.3 MEDIUM—

Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles. This issue affects Apache Commons: from 2.2 before 2.15.0. Users are recommended to upgrade to version 2.15.0, which fixes the issue.