CLSA-2026-1793128778 TuxCare security update for com.h2database:h2 (1 CVE)

TuxCare rebuilt com.h2database:h2 to address 1 CVE. Fixed in 1.3.176-tuxcare.2...

ROOT-APP-MAVEN-CVE-2022-45868 CVE-2022-45868 in com.h2database:h2 - Patched by Root

Root has patched CVE-2022-45868 in the com.h2database:h2 package for Root:Maven. Multiple fixed versions available...

PT-2026-85445

TuxCare rebuilt com.h2database:h2 to address 1 CVE. Fixed in 1.3.176-tuxcare.1...

RCE (Remote Code Execution) com.h2database:h2 Dependency in Bamboo Data Center and Server

This High severity com.h2database:h2 Dependency vulnerability was introduced in versions 9.1.0, 9.2.1, 9.3.0, and 9.4.0 of Bamboo Data Center and Server. This com.h2database:h2 Dependency vulnerability, with a CVSS Score of 8.8 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H...

africa.absa:inception-application (>=1.0.0, <=1.2.0), africa.absa:inception-test (>=1.0.0, <=1.2.0) +4115 more potentially affected by CVE-2022-45868 via com.h2database:h2 (>=1.4.198, <=2.1.214)

com.h2database:h2 MAVEN version =1.4.198, =1.0.0, =1.0.0, =0.5.2, =0.5.2, =0.1.0, =0.2.0, =0.2.0, =0.9.6, =1.2.0, =1.0, =1.0.12 - br.com.caiquejh:spring-sample 1.0.0 and more Source cves: CVE-2022-45868 Source advisory: GHSA-22WJ-VF5F-WRVJ...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.4.0), ch.sahits.game:openpatriciantest (>=0.9.1-rc1, <=0.9.1) +827 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.4.196)

com.h2database:h2 MAVEN version 1.4.196 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.4.0 - ch.sahits.game:openpatriciantest =0.9.1-rc1, =1.0.25, =1.0.25, =1.0.25, =1.0.25,...

cc.mashroom:mashroom-plugin (>=v1.0.0, <=v1.0.1), com.ecfront.dew:test-starter (1.2.2-rc) +121 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.4.195)

com.h2database:h2 MAVEN version 1.4.195 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - cc.mashroom:mashroom-plugin =v1.0.0, =1.9.1, =2.2.0, =1.0.0, =1.0.8, =1.0.0-release, =1.0.0, =0.6.1, =1.0.6, =1.0.6, =1.0.6...

au.gov.amsa.risky:h2spatial (>=0.5.2, <=0.5.9), com.github.fge:grappa-debugger (0.3.0) +22 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.4.184)

com.h2database:h2 MAVEN version 1.4.184 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - au.gov.amsa.risky:h2spatial =0.5.2, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =3.6.0, =3.8.7 - org.orbisgis:h2-dist 1.2.0 -...

com.googlecode.metridoc:ezproxy-workflow (>=0.27, <=0.30), com.googlecode.metridoc:illiad-workflow (>=0.28, <=0.30) +38 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.3.153)

com.h2database:h2 MAVEN version 1.3.153 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - com.googlecode.metridoc:ezproxy-workflow =0.27, =0.28, =0.6, =0.6, =0.13, =0.4.1, =0.4.1, =0.9, =0.4.1, =0.5, =0.7, =0.16,...

com.adgear:anoa-test (>=2.0.0-alpha-02, <=2.1.0), com.github.pires:apache-ignite-discovery-kubernetes (>=1.0, <=1.0_1) +99 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.3.175)

com.h2database:h2 MAVEN version 1.3.175 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - com.adgear:anoa-test =2.0.0-alpha-02, =1.0, =0.0.8, =0.0.1, =1.35.1, =2.3.9, =2.3.9, =2.3.9, =2.3.9, =2.3.9, =2.3.9, =2.3.9...

com.thinkbiganalytics.kylo:kylo-metadata-modeshape (0.9.1), org.wisdom-framework.jcr:wisdom-modeshape (>=0.1.0, <=0.4.0) +1 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.2.124)

com.h2database:h2 MAVEN version 1.2.124 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - com.thinkbiganalytics.kylo:kylo-metadata-modeshape 0.9.1 - org.wisdom-framework.jcr:wisdom-modeshape =0.1.0, =0.1.0, =0.4.0...

au.org.consumerdatastandards:data-holder (1.14.0), com.codbex.kronos:kronos-releng-cf (>=0.1.0, <=0.1.3) +137 more potentially affected by CVE-2022-23221 via com.h2database:h2 (>=2.0.202, <=2.0.206)

com.h2database:h2 MAVEN version =2.0.202, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.4.80.16.0, =3.2.00.16.0, =1.18.1-snapshot.20220110.8433.0.e8e25a11, =1.18.1-snapshot.20220110.8433.0.e8e25a11, =1.18.1-snapshot.20220110.8433.0.e8e25a11, =1.18.1-snapshot.20220110.8433.0.e8e25a11,...

me.soliveirajr:menta-affinity (>=0.9.6, <=0.9.7), me.soliveirajr:menta-bean (>=0.9.2, <=2.1.0) +59 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.2.138)

com.h2database:h2 MAVEN version 1.2.138 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - me.soliveirajr:menta-affinity =0.9.6, =0.9.2, =0.9.4, =1.1.0, =2.1.1, =2.5-rc1-1.0, =2.5-rc4-1.0 -...

org.codehaus.httpcache4j.storage:storage-derby (>=3.0, <=3.1), org.codehaus.httpcache4j.storage:storage-h2 (>=3.0, <=4.0-rc2) +3 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.2.126)

com.h2database:h2 MAVEN version 1.2.126 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - org.codehaus.httpcache4j.storage:storage-derby =3.0, =3.0, =1.0, =1.0, =1.0, =1.2.3 Source cves: CVE-2022-23221 Source...

org.appdapter:org.appdapter.demo.noscala (1.0.2) potentially affected by CVE-2022-23221 via com.h2database:h2 (1.3.157)

com.h2database:h2 MAVEN version 1.3.157 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - org.appdapter:org.appdapter.demo.noscala 1.0.2 Source cves: CVE-2022-23221 Source advisory: OSV:GHSA-45HX-WFHJ-473X...

africa.absa:inception-application (>=1.0.0, <=1.2.0), africa.absa:inception-test (>=1.0.0, <=1.2.0) +1981 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.4.200)

com.h2database:h2 MAVEN version 1.4.200 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - africa.absa:inception-application =1.0.0, =1.0.0, =1.0, =1.0.0, =0.0.1-alpha, =0.0.2-alpha, =4.1.0, =4.1.0, =4.1.0, =1.2.2,...

eu.eu-emi:dsr (>=1.1.0, <=1.1.1), eu.eu-emi:emir-core (>=1.2.0, <=1.3.0) +6 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.3.159)

com.h2database:h2 MAVEN version 1.3.159 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - eu.eu-emi:dsr =1.1.0, =1.2.0, =5.3.0-m4, =5.3.0-m5 Source cves: CVE-2022-23221 Source advisory: OSV:GHSA-45HX-WFHJ-473X...

net.liftweb:lift-couchdb (>=2.0-m5, <=2.0), net.liftweb:lift-jpa (>=2.0-m5, <=2.0) +15 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.2.134)

com.h2database:h2 MAVEN version 1.2.134 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - net.liftweb:lift-couchdb =2.0-m5, =2.0-m5, =2.0-m5, =2.0-m5, =2.0-m5, =2.0-m5, =2.0-m5, =2.0-m5, =2.0-m5, =2.0-m5, =2.0-m5,...

ai.hyacinth.framework:core-service-jpa-support (0.5.0), ai.hyacinth.framework:core-service-trigger-server (0.5.0) +870 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.4.197)

com.h2database:h2 MAVEN version 1.4.197 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - ai.hyacinth.framework:core-service-jpa-support 0.5.0 - ai.hyacinth.framework:core-service-trigger-server 0.5.0 -...

cn.sparrowmini:sparrow-org-service (0.0.1), cn.sparrowmini:sparrow-pem-service (0.0.1) +142 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.4.194)

com.h2database:h2 MAVEN version 1.4.194 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - cn.sparrowmini:sparrow-org-service 0.0.1 - cn.sparrowmini:sparrow-pem-service 0.0.1 - com.btc-ag.redg:redg-jpa-providers...