Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/commons-configuration2@2.10.1-1?distro=trixie
purl pkg:deb/debian/commons-configuration2@2.10.1-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-7dw4-pssj-dqf8 Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree This Out-of-bounds Write vulnerability in Apache Commons Configuration affects Apache Commons Configuration: from 2.0 before 2.10.1. User can see this as a 'StackOverflowError' calling 'ListDelimiterHandler.flatten(Object, int)' with a cyclical object tree. Users are recommended to upgrade to version 2.10.1, which fixes the issue. CVE-2024-29133
GHSA-9w38-p64v-xpmv
VCID-y9pv-wgb6-mfa7 Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() This Out-of-bounds Write vulnerability in Apache Commons Configuration affects Apache Commons Configuration: from 2.0 before 2.10.1. User can see this as a 'StackOverflowError' when adding a property in 'AbstractListDelimiterHandler.flattenIterator()'. Users are recommended to upgrade to version 2.10.1, which fixes the issue. CVE-2024-29131
GHSA-xjp4-hw94-mvp5

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-28T13:02:40.667183+00:00 Debian Importer Fixing VCID-7dw4-pssj-dqf8 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-28T13:02:40.616761+00:00 Debian Importer Fixing VCID-y9pv-wgb6-mfa7 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-03T07:21:15.392553+00:00 Debian Importer Fixing VCID-7dw4-pssj-dqf8 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:21:15.367789+00:00 Debian Importer Fixing VCID-y9pv-wgb6-mfa7 https://security-tracker.debian.org/tracker/data/json 38.1.0