What’s Vulnerable › Products

Apache Software Foundation Apache Commons Configuration vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Apache Software Foundation Apache Commons Configuration version is affected

Latest Apache Software Foundation Apache Commons Configuration vulnerabilities

• CVE-2026-45205 — Apache Commons Configuration: StackOverflowError for YAML input with cycles (CVSS 5.3)
• CVE-2025-46392 — Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x (CVSS 6.5)
• CVE-2024-29133 — Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree (CVSS 5.4)
• CVE-2024-29131 — Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() (CVSS 7.3)
• CVE-2022-33980 — Apache Commons Configuration insecure interpolation defaults (CVSS 9.8)
• CVE-2020-1953 — (CVSS 10.0)