Search for packages
| purl | pkg:deb/debian/commons-configuration2@2.11.0-2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-7dw4-pssj-dqf8 | Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree This Out-of-bounds Write vulnerability in Apache Commons Configuration affects Apache Commons Configuration: from 2.0 before 2.10.1. User can see this as a 'StackOverflowError' calling 'ListDelimiterHandler.flatten(Object, int)' with a cyclical object tree. Users are recommended to upgrade to version 2.10.1, which fixes the issue. |
CVE-2024-29133
GHSA-9w38-p64v-xpmv |
| VCID-y9pv-wgb6-mfa7 | Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() This Out-of-bounds Write vulnerability in Apache Commons Configuration affects Apache Commons Configuration: from 2.0 before 2.10.1. User can see this as a 'StackOverflowError' when adding a property in 'AbstractListDelimiterHandler.flattenIterator()'. Users are recommended to upgrade to version 2.10.1, which fixes the issue. |
CVE-2024-29131
GHSA-xjp4-hw94-mvp5 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T12:32:49.551332+00:00 | Debian Importer | Fixing | VCID-7dw4-pssj-dqf8 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T09:30:29.083446+00:00 | Debian Importer | Fixing | VCID-y9pv-wgb6-mfa7 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-13T08:35:34.277586+00:00 | Debian Importer | Fixing | VCID-7dw4-pssj-dqf8 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-11T18:20:31.770548+00:00 | Debian Importer | Fixing | VCID-y9pv-wgb6-mfa7 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-02T17:15:23.651405+00:00 | Debian Importer | Fixing | VCID-7dw4-pssj-dqf8 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-02T17:05:06.892783+00:00 | Debian Importer | Fixing | VCID-y9pv-wgb6-mfa7 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |