PT-2026-34532 · Apache · Apache Commons Io

Published 2026-04-21 · Updated 2026-04-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Apache Commons IO versions prior to 2.6-2ubuntu0.20.04.1+esm1

Description The XmlStreamReader class can excessively consume CPU resources under certain circumstances. This may allow an attacker to cause the software to crash, leading to a denial of service.

Recommendations Update to version 2.6-2ubuntu0.20.04.1+esm1.

Related Identifiers

USN-8191-1

Affected Products

Apache Commons Io

References · 3

• https://osv.dev/vulnerability/USN-8191-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8191-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-47554 · Vendor Advisory