From 93ebb2ab1017852b8f48626fccded642c9f92e02 Mon Sep 17 00:00:00 2001 From: lesiak Date: Fri, 29 Mar 2024 08:32:13 +0100 Subject: [PATCH] #129 Upgrade postgresql driver to 42.7.3 Fixes: - CVE-2024-1597 [Critical] SQL Injection via line comment generation - CVE-2022-31197 [High] SQL Injection in ResultSet.refreshRow() with malicious column names - CVE-2022-41946 [Medium] TemporaryFolder on unix-like systems does not limit access to created files --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index af6a907..efb7dad 100644 --- a/pom.xml +++ b/pom.xml @@ -142,7 +142,7 @@ org.postgresql postgresql - 42.3.5 + 42.7.3 junit