Apache Commons Configuration vulnerabilities

• apache commons configuration Apache Commons Configuration: StackOverflowError for YAML input with cycles CVE-2026-45205 Fix available 5.3 MediumMay 14, 2026
• apache commons configuration Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x CVE-2025-46392 Fix available 6.5 MediumMay 9, 2025
• apache commons configuration, fedoraproject fedora, netapp ontap tools +1 more +3 more Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() CVE-2024-29131 Fix available 7.3 HighMarch 21, 2024
• apache commons configuration, fedoraproject fedora +1 more Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree CVE-2024-29133 Fix available 5.4 MediumMarch 21, 2024
• apache commons configuration, debian linux, netapp snapcenter +2 more Apache Commons Configuration insecure interpolation defaults CVE-2022-33980 Public exploitFix available EPSS 44.6% 9.8 CriticalJuly 6, 2022
• apache commons configuration, oracle database server, healthcare foundation +2 more Remote code execution in Apache Commons Configuration CVE-2020-1953 Fix available 10.0 CriticalMarch 13, 2020