CVE-2024-29133

An out-of-bounds write vulnerability exists in Apache Commons Configuration versions from 2.0 before 2.10.1. This flaw is associated with CWE-787 and can impact the integrity and confidentiality of the application. The issue is also present in software packages including apache-hive and spark-sc2...

CVE-2026-45205

CVE-2026-45205 is an Uncontrolled Recursion vulnerability in Apache Commons Configuration (specifically affecting commons-configuration2-2.10.1.jar). When processing untrusted configuration files, the library can throw a StackOverflowError when encountering YAML input with cycles . This issue aff...