All 6 CVE vulnerabilities found in Apache Commons Configuration, with AI-generated Chinese analysis, references, and POCs.
Vendor: Apache
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-45205 | Apache Commons Configuration: StackOverflowError for YAML input with cycles CWE-674 | - | - | 2026-05-14 |
| CVE-2025-46392 | Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x CWE-400 | 7.5AI | High AI | 2025-05-09 |
| CVE-2024-29131 | Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() CWE-787 | 9.8AI | Critical AI | 2024-03-21 |
| CVE-2024-29133 | Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree CWE-787 | 9.8AI | Critical AI | 2024-03-21 |
| CVE-2022-33980 | Apache Commons Configuration insecure interpolation defaults | 9.8 | - | 2022-07-06 |
| CVE-2020-1953 | Apache Commons Configuration 输入验证错误漏洞 | 9.8 | - | 2020-03-13 |
All 6 known CVE vulnerabilities affecting Apache Commons Configuration with full Chinese analysis, references, and POCs where available.