Homepage

Uncontrolled Recursion The advisory has been revoked - it doesn't affect any version of package jenkins.src  (opens in a new tab)

Threat Intelligence

EPSS
0.04% (11th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL10-JENKINSSRC-15053745
  • published22 Jan 2026
  • disclosed11 Jul 2025
Report a new vulnerability Found a mistake?

Introduced: 11 Jul 2025

CVE-2025-48924  (opens in a new tab)
CWE-674  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream jenkins.src package and not the jenkins.src package as distributed by RHEL.

Uncontrolled Recursion vulnerability in Apache Commons Lang.

This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0.

The methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an Error is usually not handled by applications and libraries, a StackOverflowError could cause an application to stop.

Users are recommended to upgrade to version 3.18.0, which fixes the issue.