PT-2026-40906

CVE-2026-45205

·

Published

2026-05-14

·

Updated

2026-10-31

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Apache Commons versions 2.2 through 2.14.x
Description An uncontrolled recursion issue exists when processing untrusted configuration files. Specifically, the software throws a StackOverflowError—a runtime error that occurs when the call stack exceeds its allocated memory—when handling YAML input containing cycles.
Recommendations Upgrade to version 2.15.0.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-674: Uncontrolled Recursion
Related identifiers
CVE-2026-45205
GHSA-337M-MW94-2V6G
CLEANSTART-2026-EM62923
CLEANSTART-2026-JU98285
CLEANSTART-2026-QT27130
CLEANSTART-2026-RS65756
CLEANSTART-2026-SJ25007
CLEANSTART-2026-UQ19539
CLEANSTART-2026-YD86854
ECHO-FDE3-5C2E-F6AA
OPENSUSE-SU-2026:10784-1
OPENSUSE-SU-2026:20841-1
RHLW-2026-10F7476FF588DDE7
SUSE-SU-2026:21996-1
SUSE-SU-2026:2642-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com