https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 23:48:55 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-63046 <p>Improper Neutralization of Argument Delimiters in a Command (&#39;Argument Injection&#39;) vulnerability in Apache InLong. Agent Installer&#39;s ModuleManager executes arbitrary shell commands via ExcuteLinux.exeCmd() with no filtering or whitelist validation.</p> <p>This issue affects Apache InLong: from 2.0.0 before 2.4.0.</p> <p>Users are advised to upgrade to Apache InLong&#39;s 2.4.0 or cherry-pick [1]/[2] to solve it.</p> <p>[1]  https://github.com/apache/inlong/pull/12151 .</p> <p>[2]  https://github.com/apache/inlong/pull/12155 .</p> <p>Improper Neutralization of Argument Delimiters in a Command (&#39;Argument Injection&#39;) vulnerability in Apache InLong. Agent Installer&#39;s ModuleManager executes arbitrary shell commands via ExcuteLinux.exeCmd() with no filtering or whitelist validation.</p> <p>This issue affects Apache InLong: from 2.0.0 before 2.4.0.</p> <p>Users are advised to upgrade to Apache InLong&#39;s 2.4.0 or cherry-pick [1]/[2] to solve it.</p> <p>[1]  https://github.com/apache/inlong/pull/12151 .</p> <p>[2]  https://github.com/apache/inlong/pull/12155 .</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-63046 https://vulnerability.circl.lu/vuln/ghsa-jc7r-r7p4-f656 <p>Improper Neutralization of Argument Delimiters in a Command (&#39;Argument Injection&#39;) vulnerability in Apache InLong. Agent Installer&#39;s ModuleManager executes arbitrary shell commands via ExcuteLinux.exeCmd() with no filtering or whitelist validation.</p> <p>This issue affects Apache InLong: from 2.0.0 before 2.4.0.</p> <p>Users are advised to upgrade to Apache InLong&#39;s 2.4.0 or cherry-pick [1]/[2] to solve it.</p> <p>[1]  https://github.com/apache/inlong/pull/12151 .</p> <p>[2]  https://github.com/apache/inlong/pull/12155 .</p> <p>Improper Neutralization of Argument Delimiters in a Command (&#39;Argument Injection&#39;) vulnerability in Apache InLong. Agent Installer&#39;s ModuleManager executes arbitrary shell commands via ExcuteLinux.exeCmd() with no filtering or whitelist validation.</p> <p>This issue affects Apache InLong: from 2.0.0 before 2.4.0.</p> <p>Users are advised to upgrade to Apache InLong&#39;s 2.4.0 or cherry-pick [1]/[2] to solve it.</p> <p>[1]  https://github.com/apache/inlong/pull/12151 .</p> <p>[2]  https://github.com/apache/inlong/pull/12155 .</p> https://vulnerability.circl.lu/vuln/ghsa-jc7r-r7p4-f656