- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 17 · 6 critical, 6 high, 3 medium
- Registry
- Maven Central
Advisories 17
- CVE-2025-27528Critical 9.1
Apache InLong: JDBC Vulnerability for Invisible Character Bypass Leading to Arbitrary File Read
Affected: from 1.13.0, fixed in 2.2.0.
- CVE-2025-27526Medium 6.5
Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass
Affected: from 1.13.0, fixed in 2.2.0.
- CVE-2025-27522Medium 6.5
Apache InLong: JDBC Vulnerability during verification processing
Affected: from 1.13.0, fixed in 2.2.0.
- CVE-2024-26579Critical 9.8
Apache Inlong JDBC Vulnerability
Affected: from 1.7.0, fixed in 1.12.0.
- CVE-2023-51784Critical 9.8
Apache InLong: Remote Code Execution vulnerability in Apache InLong Manager
Affected: from 1.5.0, fixed in 1.10.0.
- CVE-2023-51785High 7.5
Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager
Affected: from 1.5.0, fixed in 1.10.0.
- CVE-2023-46227High 7.5
Apache inlong has an Arbitrary File Read Vulnerability
Affected: from 1.4.0, fixed in 1.9.0.
- CVE-2023-43668Unrated
Apache InLong: Jdbc Connection Security Bypass in InLong
Affected: from 1.4.0, fixed in 1.9.0.
- CVE-2023-34434High 7.5
Apache InLong: JDBC URL bypassing by allowLoadLocalInfileInPath param
Affected: from 1.4.0, fixed in 1.8.0.
- CVE-2023-31062Critical 9.8
Apache InLong: Privilege escalation vulnerability for InLong
Affected: from 1.2.0, fixed in 1.7.0.
- CVE-2023-31065Critical 9.1
Apache InLong: Insufficient Session Expiration in InLong
Affected: from 1.4.0, fixed in 1.7.0.
- CVE-2023-31098Critical 9.8
Apache InLong: Weak Password Implementation in InLong
Affected: from 1.1.0, fixed in 1.47.0.
- CVE-2023-31101Unrated
Apache InLong: Users who joined later can see the data of deleted users
Affected: from 1.5.0, fixed in 1.7.0.
- CVE-2023-31103High 7.5
Apache InLong: Attackers can change the immutable name and type of cluster
Affected: from 1.4.0, fixed in 1.7.0.
- CVE-2023-31206High 7.5
Apache InLong: Attackers can change the immutable name and type of nodes
Affected: from 1.4.0, fixed in 1.7.0.
Show all 17 advisoriesShow fewer advisories
- CVE-2023-31058High 7.5
Apache InLong: JDBC URL bypassing by adding blanks
Affected: from 1.4.0, fixed in 1.7.0.
- CVE-2023-30465Medium 5.3
Apache InLong: SQL injection in apache inLong 1.5.0
Affected: from 1.4.0, fixed in 1.6.0.