Product by Apache Software Foundation

    Apache Commons Configuration

    5 known vulnerabilities in Apache Commons Configuration (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Apache Commons Configuration (Apache Software Foundation)
    CriticalCVE-2022-33980

    Apache Commons Configuration insecure interpolation defaults

    also in 3 other products

    9.8
    MediumCVE-2025-46392

    Apache Commons Configuration: Uncontrolled Resource Consumption

    also in 11 other products

    6.5
    HighCVE-2024-29131

    Apache Commons Configuration: Out-of-bounds Write

    also in 4 other products

    7.3
    MediumCVE-2024-29133

    Apache Commons Configuration: Out-of-bounds Write

    also in 2 other products

    5.4
    MediumCVE-2026-45205

    Apache Commons Configuration: StackOverflowError for YAML input with cycles

    also in 1 other product

    5.3

    All products by Apache Software Foundation