How many CVEs have a located fix in apache/inlong?

12 published CVEs have a fix traced to functions in apache/inlong, touching 21 functions across 19 files.

Which function in apache/inlong has been patched by the most CVEs?

containSensitiveKey in inlong-manager/manager-pojo/src/main/java/org/apache/inlong/manager/pojo/util/MySQLSensitiveUrlUtils.java has been changed by 4 CVE fixes, from 2025 to 2025.

How large is a typical CVE fix in apache/inlong?

The median fix changes 30 lines. 42% of fixes change 20 lines or fewer, and 25% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

java

#496 of 500 repositories

apache/inlong

Name: apache/inlong: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix June 6, 2025

12

CVE fixes located

Published CVEs

21

Functions patched

Distinct function sites

19

Files patched

Distinct source files

2023–2025

Years covered

By CVE publication date

Overview

12 published CVEs have a fix traced to functions in apache/inlong, the earliest published in 2023. Those fixes changed 21 distinct functions across 19 files, in 50 patch hunks.

Among the 500 repositories tracked here, apache/inlong ranks #496 by the number of CVEs with a located fix.

Most patched functions

Functions in apache/inlong changed by the most CVE fixes.

Most patched files

Files in apache/inlong changed by the most CVE fixes.

1inlong-manager/manager-pojo/src/main/java/org/apache/inlong/manager/pojo/util/MySQLSensitiveUrlUtils.java6 CVEs · 2 functions
2inlong-manager/manager-pojo/src/main/java/org/apache/inlong/manager/pojo/sink/mysql/MySQLSinkDTO.java3 CVEs · 3 functions
3inlong-manager/manager-common/src/main/java/org/apache/inlong/manager/common/consts/InlongConstants.java3 CVEs · 1 functions
4inlong-manager/manager-service/src/main/java/org/apache/inlong/manager/service/core/impl/AuditServiceImpl.java2 CVEs · 3 functions
5inlong-manager/manager-service/src/main/java/org/apache/inlong/manager/service/cluster/InlongClusterServiceImpl.java1 CVEs · 2 functions
6inlong-manager/manager-common/src/main/java/org/apache/inlong/manager/common/consts/AuditSourceType.java1 CVEs · 1 functions
7inlong-manager/manager-common/src/main/java/org/apache/inlong/manager/common/enums/ErrorCodeEnum.java1 CVEs · 1 functions
8inlong-manager/manager-pojo/src/main/java/org/apache/inlong/manager/pojo/audit/AuditSourceRequest.java1 CVEs · 1 functions
9inlong-manager/manager-pojo/src/main/java/org/apache/inlong/manager/pojo/node/starrocks/StarRocksDataNodeDTO.java1 CVEs · 1 functions
10inlong-manager/manager-service/src/main/java/org/apache/inlong/manager/service/audit/AbstractAuditSourceOperator.java1 CVEs · 1 functions

Fix size

How much code a CVE fix in apache/inlong changes, with backports counted once.

30

Median lines changed

Added plus removed, per CVE

42%

Fixes of 20 lines or fewer

Share of CVE fixes

25%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in apache/inlong, and the functions each fix changed.

Apache InLong: An arbitrary file read vulnerability for JDBC
CVE-2025-27531containSensitiveKey filterSensitive getClusterNodes
High · CVSS 8.1
EPSS 0.7%2025-06-06
Apache InLong: JDBC Vulnerability for Invisible Character Bypass Leading to Arbitrary File Read
CVE-2025-27528containSensitiveKey filterSensitive InlongConstants
Medium · CVSS 6.6
EPSS 0.7%2025-05-28
Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass
CVE-2025-27526containSensitiveKey filterSensitive InlongConstants
Medium · CVSS 6.5
EPSS 0.8%2025-05-28
Apache InLong: JDBC Vulnerability during verification processing
CVE-2025-27522containSensitiveKey
High · CVSS 8.1
EPSS 0.8%2025-05-28
Apache Inlong Code Injection vulnerability
CVE-2024-36268unwrapException
High · CVSS 7.2
EPSS 1.2%2024-08-02
Apache Inlong Deserialization of Untrusted Data vulnerability
CVE-2024-26579filterSensitive InlongConstants
Critical · CVSS 9.8
EPSS 1.1%2024-05-08
Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability
CVE-2024-26580InlongAuditSourceOperator AbstractAuditSourceOperator AuditSourceType
Critical · CVSS 9.3
EPSS 1.2%2024-03-06
Apache InLong Manager Remote Code Execution vulnerability
CVE-2023-51784updateAuditSource AuditSourceRequest
Critical · CVSS 9.8
EPSS 1.6%2024-01-03
Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager
CVE-2023-51785setDbNameToUrl MySQLSinkDTO convertToJdbcUrl
High · CVSS 7.5
EPSS 1.0%2024-01-03
Authorization Bypass in Apache InLong
CVE-2023-43668filterSensitive
Critical · CVSS 9.8
EPSS 1.0%2023-10-16
SQL injection in audit endpoint
CVE-2023-35088toAuditCkSql
Critical · CVSS 9.3
EPSS 1.6%2023-07-25
Apache InLong: JDBC URL bypassing by allowLoadLocalInfileInPath param
CVE-2023-34434filterSensitive MySQLSinkDTO
High · CVSS 8.7
EPSS 1.7%2023-07-25

Get an alert for each new apache/inlong CVE, with the patched functions and AI-written analysis.

Monitor inlong CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

1Panel-dev/CordysCRM12 CVEs android.googlesource.com/platform-hardware-qcom-media12 CVEs benoitc/hackney12 CVEs chocobozzz/peertube12 CVEs apache/kylin13 CVEs apache/superset13 CVEs bagisto/bagisto13 CVEs better-auth/better-auth13 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in apache/inlong.

How many CVEs have a located fix in apache/inlong?: 12 published CVEs have a fix traced to functions in apache/inlong, touching 21 functions across 19 files.
Which function in apache/inlong has been patched by the most CVEs?: containSensitiveKey in inlong-manager/manager-pojo/src/main/java/org/apache/inlong/manager/pojo/util/MySQLSensitiveUrlUtils.java has been changed by 4 CVE fixes, from 2025 to 2025.
How large is a typical CVE fix in apache/inlong?: The median fix changes 30 lines. 42% of fixes change 20 lines or fewer, and 25% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track apache/inlong CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing