Upgrade postgresql driver to 42.7.3

zonkyio / embedded-postgres

Java embedded PostgreSQL component for testing

Apache License 2.0

341 stars 41 forks source link

Closed lesiak closed 3 months ago

lesiak commented 4 months ago

Fixes:

CVE-2024-1597 [Critical] SQL Injection via line comment generation
CVE-2022-31197 [High] SQL Injection in ResultSet.refreshRow() with malicious column names
CVE-2022-41946 [Medium] TemporaryFolder on unix-like systems does not limit access to created files

jakepearson commented 3 months ago

Would it be possible to accept this PR? I (and my security team) would be very grateful. 😄

tomix26 commented 3 months ago

@lesiak Thank you for another pull request 👍

tomix26 commented 3 months ago

@jakepearson Yep, of course, I'll try to release the next version soon 🙂

jakepearson commented 3 months ago

Thanks a bunch for the release and the fantastic library!