Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
org.apache.commons:commons-configuration2
Maven
· Package
5 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Apache Commons Configuration: StackOverflowError for YAML input with cycles
CVE-2026-45205 · GHSA-337M-MW94-2V6G
org.apache.commons:commons-configuration2
OpenShift Developer Tools and Services/jenkins-2-plugins
Maven
Red Hat
Medium
Fix reported
2026-09-10
Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree
CVE-2024-29133 · GHSA-9W38-P64V-XPMV
org.apache.commons:commons-configuration2
A-MQ Clients 2/commons-configuration2
Maven
Red Hat
Medium
Fix reported
2026-09-10
Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()
CVE-2024-29131 · GHSA-XJP4-HW94-MVP5
org.apache.commons:commons-configuration2
A-MQ Clients 2/commons-configuration2
Maven
Red Hat
Medium
Fix reported
2026-09-10
Code injection in Apache Commons Configuration
CVE-2022-33980 · GHSA-XJ57-8QJ4-C4M6
org.apache.commons:commons-configuration2
Red Hat Decision Manager 7/commons-configuration2
Maven
Red Hat
Critical
Fix reported
2024-02-17
Remote code execution in Apache Commons Configuration
CVE-2020-1953 · GHSA-7QX4-PP76-VRQH
org.apache.commons:commons-configuration2
Red Hat JBoss BRMS 5/commons-configuration
Maven
Red Hat
Critical
Fix reported
2023-11-08
