{"schemaVersion":3,"id":"CVE-2026-45205","aliases":["SUSE-SU-2026:2642-1","UBUNTU-CVE-2026-45205","DEBIAN-CVE-2026-45205","CGA-24wj-m6cm-65j8","CGA-2r3r-w678-j2xm","CGA-356h-6r82-h3pp","CGA-37wm-gx5j-pc3x","CGA-3cvh-p3wx-xgg9","CGA-3rh7-jmf6-3vcv","CGA-435g-m89g-3f3w","CGA-4j5j-w7rw-44mc","CGA-4q3m-gf7w-rfhm","CGA-52wh-x6g9-5fg5","CGA-562v-xmj2-gw64","CGA-57pm-vpxp-5gmv","CGA-62rf-jfm7-2p54","CGA-6vh6-p768-8ccm","CGA-6x5p-5c84-pp6p","CGA-7r9c-wgq2-6q7r","CGA-7x9v-h2gr-r352","CGA-8f7p-hg7x-95cj","CGA-8jmm-xhqc-9wvc","CGA-9jcf-7xxj-9pph","CGA-c3qg-pq3f-3wcx","CGA-cf4p-fv5c-j5cf","CGA-cgfc-c7jg-v3g5","CGA-g9wq-m2x9-mvjc","CGA-gx22-v5jj-vmx3","CGA-h424-v4ff-xf6p","CGA-hcx9-mw7v-gfr7","CGA-m9vj-p32f-25mg","CGA-mff7-6f4c-pgv5","CGA-pg6q-cwqp-hq6j","CGA-pr27-vf5p-j62g","CGA-q477-jvmq-68w7","CGA-r9r7-387r-vvfq","CGA-vf26-9jfh-vhhr","CGA-w26w-j836-wf2r","CGA-w973-mg65-pghr","CGA-wrh2-9vp7-m58h","CGA-wxq9-cx4x-jxrp","CGA-x74w-fgqw-wmff","CGA-xfrm-43r2-c7h4","CGA-xhjf-46p2-2g46","CGA-28mc-665q-449r","CGA-2c37-c8j9-rpr3","CGA-2h88-5h4g-v2w8","CGA-2vgx-w72w-6xvf","CGA-3632-xmx5-h2fc","CGA-368w-wgvh-x73c","CGA-3p5p-9w65-872x","CGA-3q86-45wx-pmcp","CGA-3rhx-h2f7-6jqh","CGA-3wxr-vjpg-9wg2","CGA-3x76-m8jp-r27h","CGA-45fp-7384-mgc2","CGA-499c-g4qj-rvvq","CGA-4f9h-w52x-wphp","CGA-4fx6-x9g7-4r46","CGA-4jc4-j32j-ff2j","CGA-4qfc-75vq-c6h3","CGA-54cj-h39m-r563","CGA-5544-qw7c-h8x9","CGA-5725-834c-376w","CGA-5726-jgm6-3h5f","CGA-597v-8wj5-hmxh","CGA-5p44-fh4j-fgcr","CGA-5vjc-vpqp-cxpr","CGA-5wm5-8596-jqgc","CGA-5xw4-9wm4-986q","CGA-634j-xpr6-rvcv","CGA-6g26-h4v8-5xv5","CGA-76mg-9xg5-26pv","CGA-77q5-7q88-wh8p","CGA-79c7-2jhx-9w7m","CGA-7j86-7fwx-q7qq","CGA-7qgg-wmv4-5cqr","CGA-7vfp-cggc-7g59","CGA-82qc-3f4v-r5ph","CGA-848m-cgqj-9r7h","CGA-92jj-q275-cfh2","CGA-9485-8g8x-c3w4","CGA-95mq-4rmh-rw3v","CGA-9639-8wxh-5xvg","CGA-cmgv-g2x4-j7j4","CGA-f5wg-c3c8-xqw4","CGA-f642-jgvr-qc44","CGA-f989-6868-rjm6","CGA-fgj5-f2hc-vxw6","CGA-fgq3-f939-573w","CGA-g9v6-58qh-wvcm","CGA-gc8f-g4vv-54jq","CGA-gfjw-xw32-qpwg","CGA-gm46-xfhh-grmw","CGA-gwc7-972c-g8mp","CGA-h3c9-54jm-wj36","CGA-h597-7x4h-prfg","CGA-h5vm-wq3p-rj77","CGA-hcfj-r898-2x2h","CGA-hfcc-j7qg-7764","CGA-hj8q-7rw4-x9rw","CGA-hmw9-ccjh-84rg","CGA-j4v6-vm36-457q","CGA-j6hq-8pr3-25mx","CGA-jm44-mxp5-g6vp","CGA-mfgh-w5rg-hpr9","CGA-mggv-j68j-9cmq","CGA-mpwg-vc9q-4qhp","CGA-mrmp-4vx8-55jh","CGA-mrrw-q8xq-rpq9","CGA-mv5q-m9j4-m2m5","CGA-mx98-3q8v-4v94","CGA-p4jh-44c2-c5pf","CGA-p5pg-fq26-hrgg","CGA-p65h-g799-mfcm","CGA-p6f2-276m-8746","CGA-pjqf-5xcp-vx9c","GHSA-337m-mw94-2v6g","CGA-q39h-7q8j-vfh3","CGA-qpvj-xx4h-4w78","CGA-r29q-pmmf-qh54","CGA-r3w2-qxm9-q3jp","CGA-r5r6-3wwf-5j77","CGA-rp56-f4fc-3jf2","CGA-rv39-vh6f-qjmm","CGA-v2vc-94jx-mgjg","CGA-v353-w96c-7fmj","CGA-v54j-3w8q-r574","CGA-vfpp-gpvw-fmqh","CGA-vgp3-5qp3-4q29","CGA-vmpm-pg27-2j95","CGA-w26q-62c2-f9mp","CGA-w7wc-4cxh-c748","CGA-wp5v-p357-4j43","CGA-ww68-3fh2-952r","CGA-x3j7-qvcp-2hqf","CGA-x68r-8x85-rwj4","CGA-x699-q42m-qg93","CGA-xpgv-mxh2-hw49"],"status":"published","duplicateOf":null,"title":null,"description":"Uncontrolled Recursion vulnerability in Apache Commons.\n\nWhen processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles.\nThis issue affects Apache Commons: from 2.2 before 2.15.0.\n\nUsers are recommended to upgrade to version 2.15.0, which fixes the issue.","dates":{"published":"2026-05-14T11:22:43.908Z","modified":"2026-05-14T20:31:47.159Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0082,"percentile":0.56556,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.3510000000000001,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00469},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00469,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00469,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00469,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00469,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00469,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00469,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00469,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00469,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00469,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00469,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0082,"percentile":0.56556}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00469,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00469,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00469,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00469,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0082,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0082,"percentile":0.56556}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-674","name":"Uncontrolled Recursion","description":"The product does not properly control the amount of recursion that takes place,  consuming excessive resources, such as allocated memory or the program stack.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/674.html"}],"affected":[{"vendor":"apache software foundation","product":"apache commons configuration","name":"Apache Commons Configuration","label":"apache commons configuration","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.2, < 2.15.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.2, < 2.15.0","eol":null,"hubHref":"/vendor/apache_software_foundation/apache_commons_configuration"},{"vendor":"apache","product":"commons_configuration","name":"commons configuration","label":"commons_configuration","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.2, < 2.15.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.2, < 2.15.0","eol":null,"hubHref":"/vendor/apache/commons_configuration"},{"vendor":"chainguard","product":"apache-activemq-artemis","name":"apache-activemq-artemis","label":"apache-activemq-artemis","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-activemq-artemis","purlType":"apk","versions":[{"text":"< 2.54.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.54.0-r3","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"apache-artemis","label":"Apache Artemis","category":"server-app"}},"hubHref":null},{"vendor":"chainguard","product":"apache-hop","name":"apache-hop","label":"apache-hop","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-hop","purlType":"apk","versions":[{"text":"< 2.17.0-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.0-r16","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"apache-hop","label":"Apache Hop","category":"app"}},"hubHref":null},{"vendor":"chainguard","product":"apache-hop-fips","name":"apache-hop-fips","label":"apache-hop-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-hop-fips","purlType":"apk","versions":[{"text":"< 2.17.0-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.0-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-nifi","name":"apache-nifi","label":"apache-nifi","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi","purlType":"apk","versions":[{"text":"< 2.9.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.9.0-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-polaris","name":"apache-polaris","label":"apache-polaris","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-polaris","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.7.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.7.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-polaris-fips","name":"apache-polaris-fips","label":"apache-polaris-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-polaris-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.7.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.7.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-pulsar-4.0","name":"apache-pulsar-4.0","label":"apache-pulsar-4.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-pulsar-4.0","purlType":"apk","versions":[{"text":"< 4.0.10-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.10-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-pulsar-4.1","name":"apache-pulsar-4.1","label":"apache-pulsar-4.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-pulsar-4.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-pulsar-4.2","name":"apache-pulsar-4.2","label":"apache-pulsar-4.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-pulsar-4.2","purlType":"apk","versions":[{"text":"< 4.2.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.1-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-pulsar-fips-4.0","name":"apache-pulsar-fips-4.0","label":"apache-pulsar-fips-4.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-pulsar-fips-4.0","purlType":"apk","versions":[{"text":"< 4.0.10-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.10-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-pulsar-fips-4.1","name":"apache-pulsar-fips-4.1","label":"apache-pulsar-fips-4.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-pulsar-fips-4.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-pulsar-fips-4.2","name":"apache-pulsar-fips-4.2","label":"apache-pulsar-fips-4.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-pulsar-fips-4.2","purlType":"apk","versions":[{"text":"< 4.2.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.1-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apicurio-registry","name":"apicurio-registry","label":"apicurio-registry","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apicurio-registry","purlType":"apk","versions":[{"text":"< 3.2.4-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.4-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cassandra-reaper","name":"cassandra-reaper","label":"cassandra-reaper","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cassandra-reaper","purlType":"apk","versions":[{"text":"< 4.2.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"celeborn-0.5","name":"celeborn-0.5","label":"celeborn-0.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/celeborn-0.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"celeborn-0.6","name":"celeborn-0.6","label":"celeborn-0.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/celeborn-0.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"celeborn-0.7","name":"celeborn-0.7","label":"celeborn-0.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/celeborn-0.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"druid","name":"druid","label":"druid","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/druid","purlType":"apk","versions":[{"text":"< 37.0.0-r56","noFixRecorded":false,"fixedIn":null},{"text":"< 37.0.0-r14","noFixRecorded":false,"fixedIn":null},{"text":"< 37.0.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 37.0.0-r56 | < 37.0.0-r14 | < 37.0.0-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"flyway","name":"flyway","label":"flyway","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/flyway","purlType":"apk","versions":[{"text":"< 12.8.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.8.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ghidra","name":"ghidra","label":"ghidra","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ghidra","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-client-modules","name":"hadoop-client-modules","label":"hadoop-client-modules","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-client-modules","purlType":"apk","versions":[{"text":"< 3.3.6-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.6-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.3.6","name":"hadoop-fips-3.3.6","label":"hadoop-fips-3.3.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.3.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.4.2","name":"hadoop-fips-3.4.2","label":"hadoop-fips-3.4.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.4.2","purlType":"apk","versions":[{"text":"< 3.4.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.4.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2025.08","name":"neo4j-2025.08","label":"neo4j-2025.08","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2025.08","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2025.09","name":"neo4j-2025.09","label":"neo4j-2025.09","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2025.09","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2025.10","name":"neo4j-2025.10","label":"neo4j-2025.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2025.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2025.11","name":"neo4j-2025.11","label":"neo4j-2025.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2025.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2025.12","name":"neo4j-2025.12","label":"neo4j-2025.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2025.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2026.01","name":"neo4j-2026.01","label":"neo4j-2026.01","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2026.01","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2026.02","name":"neo4j-2026.02","label":"neo4j-2026.02","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2026.02","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2026.03","name":"neo4j-2026.03","label":"neo4j-2026.03","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2026.03","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2026.04","name":"neo4j-2026.04","label":"neo4j-2026.04","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2026.04","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-5.26","name":"neo4j-5.26","label":"neo4j-5.26","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-5.26","purlType":"apk","versions":[{"text":"< 5.26.25-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.26.25-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pinot","name":"pinot","label":"pinot","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pinot","purlType":"apk","versions":[{"text":"< 1.5.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pinot-fips","name":"pinot-fips","label":"pinot-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pinot-fips","purlType":"apk","versions":[{"text":"< 1.5.0-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ranger","name":"ranger","label":"ranger","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ranger","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"solr-9-full","name":"solr-9-full","label":"solr-9-full","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/solr-9-full","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"solr-fips-9-full","name":"solr-fips-9-full","label":"solr-fips-9-full","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/solr-fips-9-full","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-3.5-scala-2.12","name":"spark-3.5-scala-2.12","label":"spark-3.5-scala-2.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-3.5-scala-2.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-3.5-scala-2.13","name":"spark-3.5-scala-2.13","label":"spark-3.5-scala-2.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-3.5-scala-2.13","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-4.0-scala-2.13","name":"spark-4.0-scala-2.13","label":"spark-4.0-scala-2.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-4.0-scala-2.13","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-4.1-scala-2.13","name":"spark-4.1-scala-2.13","label":"spark-4.1-scala-2.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-4.1-scala-2.13","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-4.2-scala-2.13","name":"spark-4.2-scala-2.13","label":"spark-4.2-scala-2.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-4.2-scala-2.13","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-fips-3.5-scala-2.12","name":"spark-fips-3.5-scala-2.12","label":"spark-fips-3.5-scala-2.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-fips-3.5-scala-2.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-fips-3.5-scala-2.13","name":"spark-fips-3.5-scala-2.13","label":"spark-fips-3.5-scala-2.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-fips-3.5-scala-2.13","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-fips-4.1-scala-2.13","name":"spark-fips-4.1-scala-2.13","label":"spark-fips-4.1-scala-2.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-fips-4.1-scala-2.13","purlType":"apk","versions":[{"text":"< 4.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-kubernetes-operator","name":"spark-kubernetes-operator","label":"spark-kubernetes-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-kubernetes-operator","purlType":"apk","versions":[{"text":"< 1.0.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-kubernetes-operator-fips","name":"spark-kubernetes-operator-fips","label":"spark-kubernetes-operator-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-kubernetes-operator-fips","purlType":"apk","versions":[{"text":"< 1.0.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tez","name":"tez","label":"tez","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tez","purlType":"apk","versions":[{"text":"< 0.10.5-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10.5-r18","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-pinot","name":"trino-plugin-pinot","label":"trino-plugin-pinot","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-pinot","purlType":"apk","versions":[{"text":"< 481-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-ranger","name":"trino-plugin-ranger","label":"trino-plugin-ranger","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-ranger","purlType":"apk","versions":[{"text":"< 481-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wso2is","name":"wso2is","label":"wso2is","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wso2is","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zipkin","name":"zipkin","label":"zipkin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zipkin","purlType":"apk","versions":[{"text":"< 3.6.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.1-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zipkin-slim","name":"zipkin-slim","label":"zipkin-slim","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zipkin-slim","purlType":"apk","versions":[{"text":"< 3.6.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.1-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-activemq-artemis","name":"apache-activemq-artemis","label":"apache-activemq-artemis","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-activemq-artemis","purlType":"apk","versions":[{"text":"< 2.54.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.54.0-r3","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"apache-artemis","label":"Apache Artemis","category":"server-app"}},"hubHref":null},{"vendor":"wolfi","product":"apache-nifi","name":"apache-nifi","label":"apache-nifi","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-nifi","purlType":"apk","versions":[{"text":"< 2.9.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.9.0-r11","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-pulsar-4.1","name":"apache-pulsar-4.1","label":"apache-pulsar-4.1","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-pulsar-4.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-pulsar-4.2","name":"apache-pulsar-4.2","label":"apache-pulsar-4.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-pulsar-4.2","purlType":"apk","versions":[{"text":"< 4.2.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.1-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apicurio-registry","name":"apicurio-registry","label":"apicurio-registry","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apicurio-registry","purlType":"apk","versions":[{"text":"< 3.2.4-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.4-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"cassandra-reaper","name":"cassandra-reaper","label":"cassandra-reaper","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/cassandra-reaper","purlType":"apk","versions":[{"text":"< 4.2.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.3-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"celeborn-0.6","name":"celeborn-0.6","label":"celeborn-0.6","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/celeborn-0.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"druid","name":"druid","label":"druid","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/druid","purlType":"apk","versions":[{"text":"< 37.0.0-r56","noFixRecorded":false,"fixedIn":null},{"text":"< 37.0.0-r14","noFixRecorded":false,"fixedIn":null},{"text":"< 37.0.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 37.0.0-r56 | < 37.0.0-r14 | < 37.0.0-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"flyway","name":"flyway","label":"flyway","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/flyway","purlType":"apk","versions":[{"text":"< 12.8.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.8.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"neo4j-2025.10","name":"neo4j-2025.10","label":"neo4j-2025.10","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/neo4j-2025.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"neo4j-2025.12","name":"neo4j-2025.12","label":"neo4j-2025.12","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/neo4j-2025.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"neo4j-2026.01","name":"neo4j-2026.01","label":"neo4j-2026.01","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/neo4j-2026.01","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"spark-4.0-scala-2.13","name":"spark-4.0-scala-2.13","label":"spark-4.0-scala-2.13","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/spark-4.0-scala-2.13","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"spark-4.1-scala-2.13","name":"spark-4.1-scala-2.13","label":"spark-4.1-scala-2.13","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/spark-4.1-scala-2.13","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tez","name":"tez","label":"tez","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tez","purlType":"apk","versions":[{"text":"< 0.10.5-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10.5-r18","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-pinot","name":"trino-plugin-pinot","label":"trino-plugin-pinot","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-pinot","purlType":"apk","versions":[{"text":"< 481-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-ranger","name":"trino-plugin-ranger","label":"trino-plugin-ranger","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-ranger","purlType":"apk","versions":[{"text":"< 481-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"zipkin","name":"zipkin","label":"zipkin","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zipkin","purlType":"apk","versions":[{"text":"< 3.6.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.1-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"zipkin-slim","name":"zipkin-slim","label":"zipkin-slim","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zipkin-slim","purlType":"apk","versions":[{"text":"< 3.6.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.1-r8","eol":null,"hubHref":null},{"vendor":"debian","product":"commons-configuration2","name":"commons-configuration2","label":"commons-configuration2","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/commons-configuration2","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"commons-configuration","name":"commons-configuration","label":"commons-configuration","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/commons-configuration","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"commons-configuration2","name":"commons-configuration2","label":"commons-configuration2","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/commons-configuration2","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"org.apache.commons","product":"commons-configuration2","name":"org.apache.commons:commons-configuration2","label":"commons-configuration2","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.apache.commons/commons-configuration2","purlType":"maven","versions":[{"text":"≥ 2.2, < 2.15.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.2, < 2.15.0","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-configuration2&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","name":"apache-commons-configuration2","label":"apache-commons-configuration2&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-configuration2&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","purlType":"rpm","versions":[{"text":"< 2.15.0-150200.5.11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-150200.5.11.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-configuration2&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","name":"apache-commons-configuration2","label":"apache-commons-configuration2&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-configuration2&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 2.15.0-150200.5.11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-150200.5.11.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-configuration2&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","name":"apache-commons-configuration2","label":"apache-commons-configuration2&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-configuration2&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","purlType":"rpm","versions":[{"text":"< 2.15.0-150200.5.11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-150200.5.11.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-configuration2&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","name":"apache-commons-configuration2","label":"apache-commons-configuration2&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-configuration2&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 2.15.0-150200.5.11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-150200.5.11.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-configuration2&distro=SUSE Linux Enterprise Module for Development Tools 15 SP7","name":"apache-commons-configuration2","label":"apache-commons-configuration2&distro=SUSE Linux Enterprise Module for Development Tools 15 SP7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-configuration2&distro=SUSE Linux Enterprise Module for Development Tools 15 SP7","purlType":"rpm","versions":[{"text":"< 2.15.0-150200.5.11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-150200.5.11.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-configuration2&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","name":"apache-commons-configuration2","label":"apache-commons-configuration2&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-configuration2&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 2.15.0-150200.5.11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-150200.5.11.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-configuration2&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","name":"apache-commons-configuration2","label":"apache-commons-configuration2&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-configuration2&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 2.15.0-150200.5.11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-150200.5.11.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-configuration2&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","name":"apache-commons-configuration2","label":"apache-commons-configuration2&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-configuration2&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","purlType":"rpm","versions":[{"text":"< 2.15.0-150200.5.11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-150200.5.11.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-configuration2&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","name":"apache-commons-configuration2","label":"apache-commons-configuration2&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-configuration2&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","purlType":"rpm","versions":[{"text":"< 2.15.0-150200.5.11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-150200.5.11.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-configuration2&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","name":"apache-commons-configuration2","label":"apache-commons-configuration2&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-configuration2&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","purlType":"rpm","versions":[{"text":"< 2.15.0-150200.5.11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-150200.5.11.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-configuration2&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","name":"apache-commons-configuration2","label":"apache-commons-configuration2&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-configuration2&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","purlType":"rpm","versions":[{"text":"< 2.15.0-150200.5.11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-150200.5.11.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-text&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","name":"apache-commons-text","label":"apache-commons-text&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-text&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","purlType":"rpm","versions":[{"text":"< 1.15.0-150200.5.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.0-150200.5.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-text&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","name":"apache-commons-text","label":"apache-commons-text&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-text&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 1.15.0-150200.5.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.0-150200.5.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-text&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","name":"apache-commons-text","label":"apache-commons-text&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-text&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","purlType":"rpm","versions":[{"text":"< 1.15.0-150200.5.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.0-150200.5.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-text&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","name":"apache-commons-text","label":"apache-commons-text&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-text&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 1.15.0-150200.5.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.0-150200.5.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-text&distro=SUSE Linux Enterprise Module for Development Tools 15 SP7","name":"apache-commons-text","label":"apache-commons-text&distro=SUSE Linux Enterprise Module for Development Tools 15 SP7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-text&distro=SUSE Linux Enterprise Module for Development Tools 15 SP7","purlType":"rpm","versions":[{"text":"< 1.15.0-150200.5.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.0-150200.5.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-text&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","name":"apache-commons-text","label":"apache-commons-text&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-text&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 1.15.0-150200.5.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.0-150200.5.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-text&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","name":"apache-commons-text","label":"apache-commons-text&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-text&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 1.15.0-150200.5.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.0-150200.5.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-text&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","name":"apache-commons-text","label":"apache-commons-text&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-text&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","purlType":"rpm","versions":[{"text":"< 1.15.0-150200.5.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.0-150200.5.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-text&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","name":"apache-commons-text","label":"apache-commons-text&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-text&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","purlType":"rpm","versions":[{"text":"< 1.15.0-150200.5.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.0-150200.5.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-text&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","name":"apache-commons-text","label":"apache-commons-text&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-text&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","purlType":"rpm","versions":[{"text":"< 1.15.0-150200.5.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.0-150200.5.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache-commons-text&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","name":"apache-commons-text","label":"apache-commons-text&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-commons-text&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","purlType":"rpm","versions":[{"text":"< 1.15.0-150200.5.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.0-150200.5.14.1","eol":null,"hubHref":null}],"affectedCount":101,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/apache/commons-configuration/pull/634","label":"github.com/apache/commons-configuration/pull/634","hostname":"github.com","tags":["Patch","REPORT","FIX","WEB","Issue Tracking"]},{"url":"https://lists.apache.org/thread/q3q3j10ohcqhs6o0rg1v7kz6kk27vtkk","label":"lists.apache.org/thread/q3q3j10ohcqhs6o0rg1v7kz6kk27vtkk","hostname":"lists.apache.org","tags":["Vendor Advisory","REPORT","Advisory","WEB","Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2026/05/14/5","label":"www.openwall.com/lists/oss-security/2026/05/14/5","hostname":"www.openwall.com","tags":["REPORT","WEB","Mailing List","Third Party Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262642-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-20262642-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1265299","label":"bugzilla.suse.com/1265299","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45205","label":"www.suse.com/security/cve/CVE-2026-45205","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2026-45205","label":"ubuntu.com/security/CVE-2026-45205","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-45205","label":"www.cve.org/CVERecord?id=CVE-2026-45205","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/14/5","label":"www.openwall.com/lists/oss-security/2026/05/14/5","hostname":"www.openwall.com","tags":["REPORT"]},{"url":"https://github.com/apache/commons-configuration/commit/b51f6bf26e774f3416fdf782a5e1edf33f32ba82","label":"github.com/apache/commons-configuration/commit/b51f6bf26e774f3416fdf782a5e1edf33f32ba82","hostname":"github.com","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-45205","label":"security-tracker.debian.org/tracker/CVE-2026-45205","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://repo.maven.apache.org/maven2","label":"repo.maven.apache.org/maven2","hostname":"repo.maven.apache.org","tags":["WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45205.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45205.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45205","label":"nvd.nist.gov/vuln/detail/CVE-2026-45205","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/apache/commons-configuration","label":"github.com/apache/commons-configuration","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:10784-1","SUSE-SU-2026:21996-1"],"duplicates":[],"related":["CGA-MVRP-QG39-5FQ7","OPENSUSE-SU-2026:10784-1","SUSE-SU-2026:21996-1"]},"timeline":[{"kind":"published","date":"2026-05-14T11:22:43.908Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-05-14T20:31:47.159Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T13:18:26.838Z","stale":false,"partial":false}}