Apache Commons security vulnerabilities
Developer framework / library. Public CVE monitoring for Apache Commons. Vendor security advisories are linked on this page.
Built for Operators of this product.
5 public records · 0 security-fix timeline events. 0 published in the last 7 days. 3 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 0
- High 0
- Medium 0
- Low 0
2026-08-060 issues2026-11-03
Known exploited
View all known exploitedRecently published
Browse catalog- Medium5.3Uncontrolled Recursion vulnerability in Apache Commons.Check if you run itEPSS 0.47%May 14, 2026
- Critical9.8Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications passed untrusted input into the text-substitution API.Check if you run itEPSS 1.04%Dec 16, 2025
- Medium6.5Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x.Check if you run itEPSS 2.12%May 9, 2025
- High7.5Apache commons_beanutils Improper Input ValidationPatch nowKEVEPSS 99.03%Apr 30, 2014