CVE-2025-27522

The Apache InLong data integration framework versions 1.13.0 through 2.1.0 are vulnerable to a security bypass caused by the deserialization of untrusted data . This vulnerability is identified as a secondary mining bypass for CVE-2024-26579 . Exploitation of this flaw can allow a remote attacker...

CVE-2023-31058

Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers would bypass the 'autoDeserialize' option filtering by adding blanks. Users are advised to upgrade to Apache InLong's 1.7.0 or...