VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jul 11, 2025· Updated Jun 17, 2026

CVE-2025-48924

CVE-2025-48924

Description

Uncontrolled Recursion vulnerability in Apache Commons Lang.

This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0.

The methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an Error is usually not handled by applications and libraries, a StackOverflowError could cause an application to stop.

Users are recommended to upgrade to version 3.18.0, which fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.commons:commons-lang3Maven
>= 3.0, < 3.18.03.18.0
commons-lang:commons-langMaven
>= 2.0, <= 2.6—

Affected products

296

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.