https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 19:18:37 +0000 https://vulnerability.circl.lu/vuln/cve-2025-48924 <p><strong>Affected:</strong> Apache Software Foundation Apache Commons Lang</p> <p>Uncontrolled Recursion vulnerability in Apache Commons Lang.</p> <p>This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0.</p> <p>The methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an Error is usually not handled by applications and libraries, a StackOverflowError could cause an application to stop.</p> <p>Users are recommended to upgrade to version 3.18.0, which fixes the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Commons Lang</p> <p>Uncontrolled Recursion vulnerability in Apache Commons Lang.</p> <p>This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0.</p> <p>The methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an Error is usually not handled by applications and libraries, a StackOverflowError could cause an application to stop.</p> <p>Users are recommended to upgrade to version 3.18.0, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/cve-2025-48924 https://vulnerability.circl.lu/vuln/usn-8364-1 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libcommons-lang-java, Ubuntu:Pro:14.04:LTS: libcommons-lang3-java, Ubuntu:Pro:16.04:LTS: libcommons-lang-java, Ubuntu:Pro:16.04:LTS: libcommons-lang3-java, Ubuntu:Pro:18.04:LTS: libcommons-lang-java, Ubuntu:Pro:18.04:LTS: libcommons-lang3-java, Ubuntu:Pro:20.04:LTS: libcommons-lang-java, Ubuntu:Pro:20.04:LTS: libcommons-lang3-java, Ubuntu:22.04:LTS: libcommons-lang-java, Ubuntu:22.04:LTS: libcommons-lang3-java and 2 more</p> <p>It was discovered that Apache Commons Lang incorrectly handled recursion in the ClassUtils.getClass method. An attacker could possibly use this issue to cause Apache Commons Lang to crash, resulting in a denial of service.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libcommons-lang-java, Ubuntu:Pro:14.04:LTS: libcommons-lang3-java, Ubuntu:Pro:16.04:LTS: libcommons-lang-java, Ubuntu:Pro:16.04:LTS: libcommons-lang3-java, Ubuntu:Pro:18.04:LTS: libcommons-lang-java, Ubuntu:Pro:18.04:LTS: libcommons-lang3-java, Ubuntu:Pro:20.04:LTS: libcommons-lang-java, Ubuntu:Pro:20.04:LTS: libcommons-lang3-java, Ubuntu:22.04:LTS: libcommons-lang-java, Ubuntu:22.04:LTS: libcommons-lang3-java and 2 more</p> <p>It was discovered that Apache Commons Lang incorrectly handled recursion in the ClassUtils.getClass method. An attacker could possibly use this issue to cause Apache Commons Lang to crash, resulting in a denial of service.</p> https://vulnerability.circl.lu/vuln/usn-8364-1