Apache Software Foundation Apache Commons Configuration

• CVE-2026-45205 Medium 5.3 Apache Commons Configuration: StackOverflowError for YAML input with cycles 0.5%
• CVE-2025-46392 Medium 6.5 Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x 2.1%
• CVE-2024-29131 High 7.3 Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() 2.1%
• CVE-2024-29133 Medium 5.4 Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree 1.7%
• CVE-2022-33980 Unrated Apache Commons Configuration insecure interpolation defaults 44.6%