[IGNITE-16384] H2 database used in Ignite has high security vulnerabilities

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Won't Fix
• Affects Version/s: 2.11
• Component/s: h2-limitation
• Ignite Flags: Docs Required, Release Notes Required
• Assignee: Unassigned
• Reporter: Anitha Sornaraja
• Created: 24/Jan/22 21:33
• Updated: 18/May/22 10:41
• Resolved: 18/May/22 10:30

Description

The H2 database used in Apache Ignite has several high security vulnerabilities. Our security scan is showing the following vulnerabilities:

CVE-2021-42392

CVE-2021-23463

CVE-2022-23221

 

Please upgrade the version of H2 database used to 2.0.206.

Issue Links

• duplicates: IGNITE-16542 Ignite h2 security vulnerabilities
• duplicates: IGNITE-17000 The h2database version 1.4.197 has a security vulnerability.
• duplicates: IGNITE-15241 Ignite H2 Security Vulnerabilities