Hello. This vulnerability affects only the H2 Console and it may harm you only if you run it with -webAllowOthers parameter without additional protection. You shouldn't do that with any version of H2. https://github.com/h2database/h2database/security/advisories/GHSA-h376-j262-vhq6 It doesn't affect H2 Database in any way.
H2 since the version 2.0.204 has LEGACY mode, it this mode some (but not all) wrong commands are allowed, including equality comparisons between numeric and boolean values. To enable this mode you need to add ;MODE=LEGACY to JDBC URL. -- You received this message because you are subscribed to the Google Groups "H2 Database" group. To unsubscribe from this group and stop receiving emails from it, send an email to h2-database+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/h2-database/25d82f23-4c76-4740-bd3f-079ade599f58n%40googlegroups.com.