CVE-2026-63016

MEDIUM 5.3

Apache InLong: Ordinary users can create new packages

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

Uncontrolled Resource Consumption vulnerability in Apache InLong. Users could affect operational configuration or allow upload of non-official packages. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/12095 https://github.com/apache/inlong/pull/11732

CWE	CWE-400
Vendor	apache software foundation
Product	apache inlong
Published	Aug 20, 2026
Last Updated	Aug 20, 2026

Stay Ahead of the Next One

Get instant alerts for apache software foundation apache inlong

Be the first to know when new medium vulnerabilities affecting apache software foundation apache inlong are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Apache Software Foundation / Apache InLong

2.0.0 < 2.4.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

lists.apache.org: https://lists.apache.org/thread/jmsn2slhqmmw7kt24zqcnw6tyjnrcykp openwall.com: http://www.openwall.com/lists/oss-security/2026/08/20/10

Credits

Tycho Knight