Search for packages
| purl | pkg:deb/debian/commons-configuration2@2.8.0-2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-7dw4-pssj-dqf8
Aliases: CVE-2024-29133 GHSA-9w38-p64v-xpmv |
Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree This Out-of-bounds Write vulnerability in Apache Commons Configuration affects Apache Commons Configuration: from 2.0 before 2.10.1. User can see this as a 'StackOverflowError' calling 'ListDelimiterHandler.flatten(Object, int)' with a cyclical object tree. Users are recommended to upgrade to version 2.10.1, which fixes the issue. |
Affected by 0 other vulnerabilities. |
|
VCID-y9pv-wgb6-mfa7
Aliases: CVE-2024-29131 GHSA-xjp4-hw94-mvp5 |
Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() This Out-of-bounds Write vulnerability in Apache Commons Configuration affects Apache Commons Configuration: from 2.0 before 2.10.1. User can see this as a 'StackOverflowError' when adding a property in 'AbstractListDelimiterHandler.flattenIterator()'. Users are recommended to upgrade to version 2.10.1, which fixes the issue. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T12:32:49.547983+00:00 | Debian Importer | Affected by | VCID-7dw4-pssj-dqf8 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T09:30:29.082014+00:00 | Debian Importer | Affected by | VCID-y9pv-wgb6-mfa7 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-13T08:35:34.273898+00:00 | Debian Importer | Affected by | VCID-7dw4-pssj-dqf8 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-11T18:20:31.767096+00:00 | Debian Importer | Affected by | VCID-y9pv-wgb6-mfa7 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-02T17:15:23.647326+00:00 | Debian Importer | Affected by | VCID-7dw4-pssj-dqf8 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-02T17:05:06.888362+00:00 | Debian Importer | Affected by | VCID-y9pv-wgb6-mfa7 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |