Hello.

This vulnerability affects only the H2 Console and it may harm you only if 
you run it with -webAllowOthers parameter without additional protection. 
You shouldn't do that with any version of H2.
https://github.com/h2database/h2database/security/advisories/GHSA-h376-j262-vhq6
It doesn't affect H2 Database in any way.

H2 since the version 2.0.204 has LEGACY mode, it this mode some (but not 
all) wrong commands are allowed, including equality comparisons between 
numeric and boolean values. To enable this mode you need to add ;MODE=LEGACY 
to JDBC URL.

-- 
You received this message because you are subscribed to the Google Groups "H2 
Database" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to h2-database+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/h2-database/25d82f23-4c76-4740-bd3f-079ade599f58n%40googlegroups.com.

Reply via email to