Hello I am also using Apache Ignite for some projects, but I don't see any dependency on h2 in my projects. I think h2 dependency is coming from somewhere else. Can you run a "mvn dependency:tree" and share the results?
Cheers Gianluca On Fri, 20 Jan 2023 at 09:56, David Cussen <[email protected]> wrote: > Hi, > > I am an employee in Workday and our team uses Apache Ignite for one of our > products. There is a dependency on com.h2database:h2:jar:1.4.197 : > https://github.com/apache/ignite/blob/master/parent/pom.xml#L92 > > > > We are wondering if there is a plan to upgrade this dependency to remediate > CVE-2021-42392 > <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42392> and if > so, do you have an ETA on when this would be available? > > > > Thank you. > > > > Kind regards, > > David Cussen > > Workday > > >
