CC
Product
Commons Configuration
6
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 3Low 0
Watch
Add Commons Configuration to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1953 | 10.0 | Mar 13 | Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements Affected: 2.2; 2.3; 2.4; 2.5; 2.6 |
| CVE-2022-33980 | 9.8 | Jul 6 | Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded Affected: 2.4 before 2.8 |
| CVE-2024-29131 | 7.3 | Mar 21 | Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1 Affected: 2.0 before 2.10.1 |
| CVE-2025-46392 | 6.5 | May 9 | Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x Affected: 1.0 before 2.0 |
| CVE-2024-29133 | 5.4 | Mar 21 | Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1 Affected: 2.0 before 2.10.1 |
| CVE-2026-45205 | 5.3 | May 14 | Apache Commons Configuration: StackOverflowError for YAML input with cycles Affected: 2.2 before 2.15.0 |
Showing 6