Hi,
I am an employee in Workday and our team uses Apache Ignite for one of our 
products. There is a dependency on com.h2database:h2:jar:1.4.197 : 
https://github.com/apache/ignite/blob/master/parent/pom.xml#L92

We are wondering if there is a plan to upgrade this dependency to remediate 
CVE-2021-42392<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42392> 
and if so, do you have an ETA on when this would be available?

Thank you.

Kind regards,
David Cussen
Workday

Reply via email to