https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T22:20:36.177505+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-47554 CVE-2024-47554 — Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader 2026-10-05T22:20:38.730508+00:00

Affected: Apache Software Foundation Apache Commons IO

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.

This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

 https://vulnerability.circl.lu/vuln/usn-8191-1 USN-8191-1 — commons-io vulnerability 2026-10-05T22:20:38.730683+00:00

Affected: Ubuntu:Pro:14.04:LTS: commons-io, Ubuntu:Pro:16.04:LTS: commons-io, Ubuntu:Pro:18.04:LTS: commons-io, Ubuntu:Pro:20.04:LTS: commons-io, Ubuntu:Pro:22.04:LTS: commons-io, Ubuntu:Pro:24.04:LTS: commons-io

It was discovered that Apache Commons IO's XmlStreamReader class could excessively consume CPU resources under certain circumstances. An attacker could possibly use this issue to cause Apache Commons IO to crash, resulting in a denial of service.