CVE-2025-27522

The Apache InLong data integration framework is vulnerable to a security bypass due to an insecure deserialization flaw in versions 1.13.0 through 2.1.0 . This vulnerability is a secondary mining bypass for CVE-2024-26579, where an attacker could exploit the deserialization mechanism to cause a b...

CVE-2023-31058

Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers would bypass the 'autoDeserialize' option filtering by adding blanks. Users are advised to upgrade to Apache InLong's 1.7.0 or...