What is GHSA-qvfh-v498-xrrf?

GHSA-qvfh-v498-xrrf is a security advisory published by GitHub Security Advisories with unknown severity. Server-Side Request Forgery (SSRF) vulnerability in Apache InLong. Any authenticated user (no...

Which CVE IDs does GHSA-qvfh-v498-xrrf cover?

GHSA-qvfh-v498-xrrf covers the following CVE IDs: CVE-2026-63044. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-qvfh-v498-xrrfunknown

Server-Side Request Forgery (SSRF) vulnerability in Apache InLong. Any authenticated user (no...

Vendor

GitHub Security Advisories

Published

August 20, 2026

Last Modified

August 20, 2026

🔗 CVE IDs covered (1)

CVE-2026-63044 →

📋 Description

Server-Side Request Forgery (SSRF) vulnerability in Apache InLong. Any authenticated user (no admin role required) can cause the InLong Manager server to make outbound HTTP requests or TCP connections to arbitrary internal hosts and ports.

This issue affects Apache InLong: from 2.0.0 before 2.4.0.

Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] to solve it.

[1] https://github.com/apache/inlong/pull/12130 .

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-63044
https://lists.apache.org/thread/b3rtzssd8hdk0dyq4y6mpdx6jj5ro4g6
http://www.openwall.com/lists/oss-security/2026/08/20/17
https://github.com/advisories/GHSA-qvfh-v498-xrrf