https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T21:59:27.632601+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2023-25936 cnvd-2023-25936 2026-10-10T21:59:27.635386+00:00 cnvd-2023-25936 https://vulnerability.circl.lu/vuln/fkie_cve-2023-27296 fkie_cve-2023-27296 2026-10-10T21:59:27.635431+00:00

Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong.

It could be triggered by authenticated users of InLong, you could refer to [1] to know more about this vulnerability.

This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick [2] to solve it.

[1]  https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html

https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html

[2] https://github.com/apache/inlong/pull/7422 https://github.com/apache/inlong/pull/7422

 https://vulnerability.circl.lu/vuln/ghsa-gpqq-59rp-3c3w GHSA-gpqq-59rp-3c3w — Apache InLong vulnerable to JDBC Deserialization of Untrusted Data 2026-10-10T21:59:27.635481+00:00

Affected: Maven: org.apache.inlong:inlong-manager

Apache InLong versions from 1.1.0 through 1.5.0 are vulnerable to Java Database Connectivity (JDBC) deserialization of untrusted data from the MySQL JDBC URL in MySQLDataNode. It could be triggered by authenticated users of InLong. This has been patched in version 1.6.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick the [patch](https://github.com/apache/inlong/pull/7422) to solve it.

 https://vulnerability.circl.lu/vuln/gsd-2023-27296 gsd-2023-27296 2026-10-10T21:59:27.635514+00:00 gsd-2023-27296