tocsin

Debian/commons-configuration2: critical 10

Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration v

Action: Upgrade commons-configuration2 to 2.7-1 or later.

Affected

introducedfixedlast affected
02.7-1-

Fixed versions

2.7-1

Sources

published · modified · JSON