CVE-2024-29133

CVE-2024-29133 describes an out-of-bounds write vulnerability in Apache Commons Configuration, affecting versions 2.0 up to 2.10.0 (and related entries indicate 2.0 through 2.10.1 as impacted). The issue is fixed in 2.10.1. Multiple connected sources corroborate the vulnerability class and the fi...

CVE-2026-45205

CVE-2026-45205 describes an uncontrolled recursion (StackOverflowError) in Apache Commons Configuration when processing untrusted YAML configuration files with cycles. Affected versions are 2.2 prior to 2.15.0; the advisory recommends upgrading to 2.15.0 to fix the issue. Public disclosures acros...