pkg:Maven/org.apache.commons:commons-configuration2

5 total CVEsCRITICAL2MEDIUM3

✅ Check your installed version

All known vulnerabilities

  • CRITICAL10.0CVE-2020-1953Remote code execution in Apache Commons Configuration
    >= 2.2, < 2.7
  • CRITICAL9.8CVE-2022-33980commons-configuration2 - security update
    >= 2.4, < 2.8.0
  • MEDIUM6.5CVE-2024-29133Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree
    >= 2.0, < 2.10.1
  • MEDIUM6.5CVE-2024-29131Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()
    >= 2.0, < 2.10.1
  • MEDIUM5.3CVE-2026-45205Apache Commons Configuration: StackOverflowError for YAML input with cycles
    >= 2.2, < 2.15.0