Please find some backports of CVE fixes for H2Database 1.4.x here: https://github.com/boris-unckel/h2database/releases
Initially done to keep a fork of WF26.x fixed, it seems some other libraries have transitive dependencies to these old versions. At all: It's better to migrate to the latest original version, which we will do as soon as possible. Happy Christmas Boris -- You received this message because you are subscribed to the Google Groups "H2 Database" group. To unsubscribe from this group and stop receiving emails from it, send an email to h2-database+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/h2-database/ec5f9612-44e7-4404-b01f-92e840edc1d4n%40googlegroups.com.