{"schema_version": "1.6.1", "id": "CVE-2026-63016", "summary": "Ordinary users can create new packages", "details": "Uncontrolled Resource Consumption vulnerability in Apache InLong. Users could affect operational configuration or allow upload of non-official packages.\n\nThis issue affects Apache InLong: from 2.0.0 before 2.4.0.\n\n\n\nUsers are advised to upgrade to Apache InLong's  2.4.0 or cherry-pick [1] to solve it.\n\n[1] \n\n https://github.com/apache/inlong/pull/12095 https://github.com/apache/inlong/pull/11732", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "2.0.0"}, {"fixed": "2.4.0"}]}]}], "references": [{"type": "WEB", "url": "https://lists.apache.org/thread/jmsn2slhqmmw7kt24zqcnw6tyjnrcykp"}]}