Potential vulnerability in dependencies jars - Githubissues

liquibase / node-liquibase

Node.js wrap for Liquibase

MIT License

32 stars 14 forks source link

Potential vulnerability in dependencies jars #52

Open rbhuva opened 2 years ago

rbhuva commented 2 years ago

Hi,

Potential vulnerability in dependencies jars

Node-Liquibase Version 4.4.0

postgresql-42.2.8.jar is vulnerable as per this CVE.

path: liquibase\dist\drivers

CVE-2022-21724 https://github.com/advisories/GHSA-v7wg-cpwc-24m4

h2-1.4.200.jar is vulnerable as per the below CVE.

path:-liquibase\dist\liquibase\lib

CVE-2022-23221 CVE-2021-42392 CVE-2021-23463

can you please update the dependencies jar with a fix?

Thanks, Rajdeep Bhuva

micodls commented 1 year ago

Bumping this issue