CVE-2026-94114: Apache Commons BCEL: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser
Apache Commons BCEL before 6.13.0 can recurse unboundedly while parsing nested Code or Record attributes (CVE-2026-94114).
44
Apache Commons BCEL before 6.13.0 can recurse unboundedly while parsing nested Code or Record attributes (CVE-2026-94114).
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 2.3K readers · 3.3K views · 473 reads · all time 111K views