What is GHSA-jmq8-hg35-36h2?

GHSA-jmq8-hg35-36h2 is a security advisory published by GitHub Security Advisories with unknown severity. Files or Directories Accessible to External Parties vulnerability in Apache InLong. Any user who...

Which CVE IDs does GHSA-jmq8-hg35-36h2 cover?

GHSA-jmq8-hg35-36h2 covers the following CVE IDs: CVE-2026-63042. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-jmq8-hg35-36h2unknown

Files or Directories Accessible to External Parties vulnerability in Apache InLong. Any user who...

Vendor

GitHub Security Advisories

Published

August 20, 2026

Last Modified

August 20, 2026

🔗 CVE IDs covered (1)

CVE-2026-63042 →

📋 Description

Files or Directories Accessible to External Parties vulnerability in Apache InLong. Any user who can authenticate to the manager can create, modify and delete Data Node definitions.

This issue affects Apache InLong: from 2.0.0 before 2.4.0.

Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] to solve it.

[1] https://github.com/apache/inlong/pull/12161 .

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-63042
https://lists.apache.org/thread/wxs4jfjkoo6rlyovhrx8bo74rfmzwbk7
http://www.openwall.com/lists/oss-security/2026/08/20/15
https://github.com/advisories/GHSA-jmq8-hg35-36h2