~ / search / GHSA-r324-vgr5-73c9

GHSA-r324-vgr5-73c9

Apache InLong: JDBC Vulnerability during verification processing

Source: GitHub Advisory Database (reviewed) High CVE-2025-27522

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.inlong:manager-pojo >= 1.13.0, < 2.2.0 2.2.0

Details

As written in the advisory (Markdown source, shown as plain text).

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/11732

References

External links from the advisory. They lead to third-party sites.