{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.10"}],"component":"commons-configuration:commons-configuration","cve_ids":["CVE-2025-46392"],"ecosystem":"Maven","epss":0.02123,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-pvp8-3xj6-8c6x","id":"tcs_01M5N983M0BS94T57FZQZHSECE","modified_at":"2026-09-10T03:49:36.524577244Z","published_at":"2025-05-09T12:31:33Z","references":["https://osv.dev/vulnerability/GHSA-pvp8-3xj6-8c6x","https://nvd.nist.gov/vuln/detail/CVE-2025-46392","https://github.com/apache/commons-configuration","https://lists.apache.org/thread/y1pl0mn3opz6kwkm873zshjdxq3dwq5s","https://www.cve.org/CVERecord?id=CVE-2024-29131","https://www.cve.org/CVERecord?id=CVE-2024-29133"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-pvp8-3xj6-8c6x","url":"https://osv.dev/vulnerability/GHSA-pvp8-3xj6-8c6x"},{"source":"nvd","source_id":"CVE-2025-46392","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46392"}],"summary":"Apache Commons Configuration Uncontrolled Resource Consumption"}