{"id":5090214,"name":"com.h2database:h2","ecosystem":"maven","description":"H2 Database Engine","homepage":"https://h2database.com","licenses":"MPL 2.0,EPL 1.0","normalized_licenses":["MPL-2.0","SSPL-1.0"],"repository_url":"https://github.com/h2database/h2database","keywords_array":[],"namespace":"com.h2database","versions_count":142,"first_release_published_at":"2007-08-26T15:10:45.000Z","latest_release_published_at":"2026-09-27T02:14:39.000Z","latest_release_number":"2.5.252","last_synced_at":"2026-10-03T20:35:15.353Z","created_at":"2022-07-29T05:48:04.118Z","updated_at":"2026-10-04T01:16:49.747Z","registry_url":"https://central.sonatype.com/artifact/com.h2database/h2/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.h2database/h2/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":30195092,"uuid":"33745913","full_name":"h2database/h2database","owner":"h2database","description":"H2 is an embeddable RDBMS written in Java.","archived":false,"fork":false,"pushed_at":"2026-10-01T10:43:18.000Z","size":93057,"stargazers_count":4634,"open_issues_count":450,"forks_count":1319,"subscribers_count":128,"default_branch":"master","last_synced_at":"2026-10-02T03:46:39.726Z","etag":null,"topics":["database","java","jdbc","sql"],"latest_commit_sha":null,"homepage":"https://h2database.com","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/h2database.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2015-04-10T19:09:09.000Z","updated_at":"2026-10-01T13:26:32.000Z","dependencies_parsed_at":"2026-10-01T19:46:59.522Z","dependency_job_id":null,"html_url":"https://github.com/h2database/h2database","commit_stats":{"total_commits":12604,"total_committers":203,"mean_commits":62.08866995073892,"dds":0.5841002856236115,"last_synced_commit":"5bd1859c0ffac9ca9175725be764cc3f3d452532"},"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/h2database/h2database","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/h2database","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/sbom","scorecard":{"id":451543,"data":{"date":"2025-08-11","repo":{"name":"github.com/h2database/h2database","commit":"2df8bdc9c57ef7a3b6f259705477248639076840"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.6,"checks":[{"name":"Maintained","score":10,"reason":"13 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":1,"reason":"Found 2/13 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/CI.yml:6","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":5,"reason":"binaries present in source code","details":["Warn: binary detected: h2/.mvn/wrapper/maven-wrapper.jar:1","Warn: binary detected: h2/service/wrapper.dll:1","Warn: binary detected: h2/service/wrapper.exe:1","Warn: binary detected: h2/service/wrapper.jar:1","Warn: binary detected: h2/src/java21/precompiled/org/h2/util/Utils21.class:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/h2database/h2database/CI.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/h2database/h2database/CI.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":1,"reason":"1 out of the last 5 releases have a total of 1 signed artifacts.","details":["Warn: release artifact version-2.3.232 not signed: https://api.github.com/repos/h2database/h2database/releases/169642895","Info: signed release artifact: h2-2.3.230-sources.jar.asc: https://github.com/h2database/h2database/releases/tag/version-2.3.230","Warn: release artifact version-2.2.224 not signed: https://api.github.com/repos/h2database/h2database/releases/121428973","Warn: release artifact version-2.2.222 not signed: https://api.github.com/repos/h2database/h2database/releases/118339609","Warn: release artifact version-2.2.220 not signed: https://api.github.com/repos/h2database/h2database/releases/111005091","Warn: release artifact version-2.3.232 does not have provenance: https://api.github.com/repos/h2database/h2database/releases/169642895","Warn: release artifact version-2.3.230 does not have provenance: https://api.github.com/repos/h2database/h2database/releases/165364867","Warn: release artifact version-2.2.224 does not have provenance: https://api.github.com/repos/h2database/h2database/releases/121428973","Warn: release artifact version-2.2.222 does not have provenance: https://api.github.com/repos/h2database/h2database/releases/118339609","Warn: release artifact version-2.2.220 does not have provenance: https://api.github.com/repos/h2database/h2database/releases/111005091"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T08:18:25.956Z","repository_id":30195092,"created_at":"2025-08-19T08:18:25.957Z","updated_at":"2025-08-19T08:18:25.957Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":342085742,"owners_count":37921725,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-10-02T02:00:07.254Z","response_time":104,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"h2database","name":"H2 Database Engine","uuid":"11459762","kind":"organization","description":"","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/11459762?v=4","repositories_count":2,"last_synced_at":"2026-09-28T04:48:53.062Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/h2database","funding_links":[],"total_stars":4637,"followers":79,"following":0,"created_at":"2022-11-12T05:52:06.469Z","updated_at":"2026-09-28T04:48:53.078Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/h2database","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/h2database/repositories"},"tags":[{"name":"version-2.5.252","sha":"f986838bbbf4941d2edcd5298b18c9936d1b7359","kind":"commit","published_at":"2026-09-23T23:32:38.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-2.5.252","html_url":"https://github.com/h2database/h2database/releases/tag/version-2.5.252","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-2.5.252","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.5.252","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.5.252/manifests"},{"name":"version-2.5.250","sha":"bba342dca6e4eb1f1efb1844aec21582499b2c56","kind":"commit","published_at":"2026-08-30T03:00:08.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-2.5.250","html_url":"https://github.com/h2database/h2database/releases/tag/version-2.5.250","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-2.5.250","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.5.250","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.5.250/manifests"},{"name":"version-2.4.240","sha":"c8eb81be7a30786b7534377a7e475bdaa08aeeb8","kind":"commit","published_at":"2025-09-22T22:11:12.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-2.4.240","html_url":"https://github.com/h2database/h2database/releases/tag/version-2.4.240","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-2.4.240","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.4.240","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.4.240/manifests"},{"name":"version-2.3.232","sha":"2e46a1c9680089098d756435ae94193ee72c1334","kind":"commit","published_at":"2024-08-10T21:00:26.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-2.3.232","html_url":"https://github.com/h2database/h2database/releases/tag/version-2.3.232","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-2.3.232","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.3.232","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.3.232/manifests"},{"name":"version-2.3.230","sha":"cc4846b4bec675aa70195e8b114fcd59fa186c7e","kind":"commit","published_at":"2024-07-14T21:41:45.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-2.3.230","html_url":"https://github.com/h2database/h2database/releases/tag/version-2.3.230","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-2.3.230","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.3.230","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.3.230/manifests"},{"name":"version-2.2.224","sha":"19b770ec010a621989a980bf166a10ac10072a61","kind":"commit","published_at":"2023-09-16T21:44:09.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-2.2.224","html_url":"https://github.com/h2database/h2database/releases/tag/version-2.2.224","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-2.2.224","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.2.224","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.2.224/manifests"},{"name":"version-2.2.222","sha":"8ba3ea3b87504c5058bee5ae7df84999fdfb68a3","kind":"commit","published_at":"2023-08-23T03:38:44.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-2.2.222","html_url":"https://github.com/h2database/h2database/releases/tag/version-2.2.222","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-2.2.222","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.2.222","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.2.222/manifests"},{"name":"version-2.2.220","sha":"66185fbfde24fbe5b2adf06fdaae4f5ffb178813","kind":"commit","published_at":"2023-07-04T14:55:09.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-2.2.220","html_url":"https://github.com/h2database/h2database/releases/tag/version-2.2.220","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-2.2.220","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.2.220","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.2.220/manifests"},{"name":"version-2.1.214","sha":"1ba3590b5d29581a14b018b966e5da0a8ff2994c","kind":"commit","published_at":"2022-06-14T01:32:55.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-2.1.214","html_url":"https://github.com/h2database/h2database/releases/tag/version-2.1.214","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-2.1.214","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.1.214","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.1.214/manifests"},{"name":"version-2.1.212","sha":"8f861862c480204811e96af28e101ae7a7f1ef4f","kind":"commit","published_at":"2022-04-09T05:40:21.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-2.1.212","html_url":"https://github.com/h2database/h2database/releases/tag/version-2.1.212","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-2.1.212","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.1.212","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.1.212/manifests"},{"name":"version-2.1.210","sha":"ca926f8b646aa3dd3da5f7a81bbee055b19a8d6a","kind":"commit","published_at":"2022-01-17T15:10:44.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-2.1.210","html_url":"https://github.com/h2database/h2database/releases/tag/version-2.1.210","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-2.1.210","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.1.210","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.1.210/manifests"},{"name":"version-2.0.206","sha":"3d957a0aeb509c5976a3489e7867ecbb121280f4","kind":"commit","published_at":"2022-01-04T18:45:29.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-2.0.206","html_url":"https://github.com/h2database/h2database/releases/tag/version-2.0.206","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-2.0.206","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.0.206","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.0.206/manifests"},{"name":"version-2.0.204","sha":"76994fd0ae92cce4660aa10491a7b6bb7680727a","kind":"commit","published_at":"2021-12-21T16:36:09.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-2.0.204","html_url":"https://github.com/h2database/h2database/releases/tag/version-2.0.204","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-2.0.204","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.0.204","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.0.204/manifests"},{"name":"version-2.0.202","sha":"bb50243925f1707495d0b8e06a3e0e6caeed17ed","kind":"commit","published_at":"2021-11-25T20:13:23.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-2.0.202","html_url":"https://github.com/h2database/h2database/releases/tag/version-2.0.202","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-2.0.202","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.0.202","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-2.0.202/manifests"},{"name":"version-1.4.200","sha":"e1bcf3b6ba8927ff640299c879011f2df0750ef9","kind":"commit","published_at":"2019-10-14T06:47:23.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.200","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.200","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.200","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.200","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.200/manifests"},{"name":"version-1.4.199","sha":"1ceaa87e6a5508fd117e8b39b33d623caded3c14","kind":"commit","published_at":"2019-03-13T13:31:39.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.199","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.199","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.199","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.199","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.199/manifests"},{"name":"version-1.4.198","sha":"2b8fa36798a2f142d3b8eacf89b7da00645a6f75","kind":"commit","published_at":"2019-02-22T13:25:42.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.198","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.198","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.198","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.198","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.198/manifests"},{"name":"version-1.4.197","sha":"c8a861bb1a3f04967ec40cb5e3336535c43af5fb","kind":"commit","published_at":"2018-03-18T19:28:29.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.197","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.197","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.197","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.197","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.197/manifests"},{"name":"version-1.4.196","sha":"1c6e22a5679c61b2fbd64ebc05d73f8fce1d5112","kind":"commit","published_at":"2017-06-10T12:39:35.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.196","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.196","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.196","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.196","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.196/manifests"},{"name":"version-1.4.195","sha":"6290b79a2418189c5faa0e0506bf6503fc7630e6","kind":"commit","published_at":"2017-04-23T12:16:05.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.195","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.195","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.195","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.195","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.195/manifests"},{"name":"version-1.4.194","sha":"41f4050a228ba35a2aeb578503b4aca1e5d5670e","kind":"commit","published_at":"2017-03-10T12:53:37.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.194","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.194","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.194","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.194","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.194/manifests"},{"name":"version-1.4.193","sha":"2abb26c3e61eb3df780a6863d0132f241deae1f8","kind":"commit","published_at":"2016-10-31T11:46:07.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.193","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.193","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.193","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.193","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.193/manifests"},{"name":"version-1.4.192","sha":"5a038869965bed480c4ed71e88c33ba3ec514c99","kind":"commit","published_at":"2016-05-26T05:45:04.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.192","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.192","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.192","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.192","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.192/manifests"},{"name":"version-1.4.191","sha":"b9d25f108851ee777a1c166e13b0853c9c014cb2","kind":"commit","published_at":"2016-01-21T16:32:33.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.191","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.191","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.191","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.191","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.191/manifests"},{"name":"version-1.4.190","sha":"82c1ce2782e8d870a49d8927611ce184d4e95eb6","kind":"commit","published_at":"2015-10-11T12:34:20.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.190","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.190","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.190","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.190","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.190/manifests"},{"name":"version-1.4.188","sha":"486fe1a043cc2f944e0da5e0ab1a93fdb70e8819","kind":"commit","published_at":"2015-08-01T09:00:12.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.188","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.188","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.188","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.188","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.188/manifests"},{"name":"version-1.4.187","sha":"3e9499154816f237efa2594fab86e1227b6bcdb0","kind":"commit","published_at":"2015-04-10T18:44:31.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.187","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.187","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.187","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.187","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.187/manifests"},{"name":"version-1.4.186","sha":"348984fec70d44076ccc2cda1cda6b3968fd9d61","kind":"commit","published_at":"2015-03-02T09:54:18.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.186","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.186","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.186","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.186","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.186/manifests"},{"name":"version-1.4.185","sha":"a0351c2a259024163929d79483559d42da6e4398","kind":"commit","published_at":"2015-01-16T17:10:40.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.185","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.185","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.185","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.185","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.185/manifests"},{"name":"version-1.4.184","sha":"d6dfeb6a7b53fb9e07345f4cdb9ddbdf95dd3169","kind":"commit","published_at":"2014-12-19T07:36:41.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.184","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.184","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.184","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.184","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.184/manifests"},{"name":"version-1.4.183","sha":"c0e8bf1d7b01009f79098805b39c592b5f3198e8","kind":"commit","published_at":"2014-12-13T19:15:18.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.183","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.183","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.183","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.183","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.183/manifests"},{"name":"version-1.4.182","sha":"81cb9c1b801379db525b3d7467e8882f5631de43","kind":"commit","published_at":"2014-10-17T12:18:45.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.182","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.182","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.182","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.182","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.182/manifests"},{"name":"version-1.4.181","sha":"21c151d29e31d17290772c0a49e1400f04df8cac","kind":"commit","published_at":"2014-08-06T19:05:52.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.181","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.181","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.181","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.181","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.181/manifests"},{"name":"version-1.3","sha":"d52c0c339f53947e37ad5a4c58a69f9cb14ce4d4","kind":"commit","published_at":"2014-06-23T06:40:17.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.3","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.3/manifests"},{"name":"version-1.4.178","sha":"1092b854469e08bfe4442bc0c7737e2228b460f3","kind":"commit","published_at":"2014-05-02T13:15:33.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.178","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.178","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.178","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.178","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.178/manifests"},{"name":"version-1.4.177","sha":"b25a9eb0d0724099f4bb67da22bfc6705f9537c6","kind":"commit","published_at":"2014-04-12T07:24:17.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.4.177","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.4.177","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.4.177","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.177","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.4.177/manifests"},{"name":"version-1.2","sha":"53886f61a4f8a4df7ff59337b6ac8e3fbaaace59","kind":"commit","published_at":"2012-02-03T17:30:22.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.2","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.2/manifests"},{"name":"version-1.1","sha":"04c8cd944bdb60735b2312b19a05e41d3161509e","kind":"commit","published_at":"2012-02-03T14:00:39.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.1","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.1/manifests"},{"name":"version-1.0","sha":"b76137fa79a8f088c92b314289fb5e472af47f6c","kind":"commit","published_at":"2011-05-27T13:32:55.000Z","download_url":"https://codeload.github.com/h2database/h2database/tar.gz/version-1.0","html_url":"https://github.com/h2database/h2database/releases/tag/version-1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/h2database/h2database@version-1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/tags/version-1.0/manifests"}]},"repo_metadata_updated_at":"2026-10-02T03:54:02.214Z","dependent_packages_count":7857,"downloads":null,"downloads_period":null,"dependent_repos_count":266808,"rankings":{"downloads":null,"dependent_repos_count":0.0018033181053137776,"dependent_packages_count":0.008014747134727898,"stargazers_count":5.401538831449868,"forks_count":4.871964414522722,"docker_downloads_count":0.06752424461008255,"average":2.070169111164543},"purl":"pkg:maven/com.h2database/h2","advisories":[{"uuid":"GSA_kwCzR0hTQS0yMndqLXZmNWYtd3J2as4AAwB8","url":"https://github.com/advisories/GHSA-22wj-vf5f-wrvj","title":"Password exposure in H2 Database ","description":"The web-based admin console in H2 Database Engine through 2.1.214 can be started via the CLI with the argument -webAdminPassword, which allows the user to specify the password in cleartext for the web admin console. Consequently, a local user (or an attacker that has obtained local access through some means) would be able to discover the password by listing processes and their arguments. NOTE: the vendor states \"This is not a vulnerability of H2 Console ... Passwords should never be passed on the command line and every qualified DBA or system administrator is expected to know that.\"","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-11-23T21:30:31.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.8,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-45868","https://github.com/h2database/h2database/blob/96832bf5a97cdc0adc1f2066ed61c54990d66ab5/h2/src/main/org/h2/server/web/WebServer.java#L346-L347","https://sites.google.com/sonatype.com/vulnerabilities/sonatype-2022-6243","https://github.com/h2database/h2database/pull/3833","https://github.com/h2database/h2database/commit/581ed18ff9d6b3761d851620ed88a3994a351a0d","https://github.com/h2database/h2database/issues/3686","https://github.com/advisories/GHSA-22wj-vf5f-wrvj","https://github.com/h2database/h2database/releases/tag/version-2.2.220"],"source_kind":"github","identifiers":["GHSA-22wj-vf5f-wrvj","CVE-2022-45868"],"repository_url":"https://github.com/h2database/h2database","blast_radius":0.0,"created_at":"2022-12-21T16:11:48.531Z","updated_at":"2026-10-03T14:08:22.519Z","epss_percentage":0.0031,"epss_percentile":0.21511,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yMndqLXZmNWYtd3J2as4AAwB8","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0yMndqLXZmNWYtd3J2as4AAwB8","packages":[{"ecosystem":"maven","package_name":"com.h2database:h2","versions":[{"first_patched_version":"2.2.220","vulnerable_version_range":"\u003e= 1.4.198, \u003c 2.2.220"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yMndqLXZmNWYtd3J2as4AAwB8/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00NWh4LXdmaGotNDczeM0kjA","url":"https://github.com/advisories/GHSA-45hx-wfhj-473x","title":"Arbitrary code execution in H2 Console","description":"H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2022-01-21T23:07:39.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-23221","https://github.com/h2database/h2database/releases/tag/version-2.1.210","https://github.com/h2database/h2database/security/advisories","https://twitter.com/d0nkey_man/status/1483824727936450564","http://packetstormsecurity.com/files/165676/H2-Database-Console-Remote-Code-Execution.html","http://seclists.org/fulldisclosure/2022/Jan/39","https://lists.debian.org/debian-lts-announce/2022/02/msg00017.html","https://www.debian.org/security/2022/dsa-5076","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://security.netapp.com/advisory/ntap-20230818-0011/","https://github.com/advisories/GHSA-45hx-wfhj-473x"],"source_kind":"github","identifiers":["GHSA-45hx-wfhj-473x","CVE-2022-23221"],"repository_url":"https://github.com/h2database/h2database","blast_radius":0.0,"created_at":"2022-12-21T16:12:38.137Z","updated_at":"2026-09-30T09:14:47.845Z","epss_percentage":0.64766,"epss_percentile":0.99142,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00NWh4LXdmaGotNDczeM0kjA","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00NWh4LXdmaGotNDczeM0kjA","packages":[{"ecosystem":"maven","package_name":"com.h2database:h2","versions":[{"first_patched_version":"2.1.210","vulnerable_version_range":"\u003c 2.1.210"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00NWh4LXdmaGotNDczeM0kjA/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1oMzc2LWoyNjItdmhxNs0g_w","url":"https://github.com/advisories/GHSA-h376-j262-vhq6","title":"RCE in H2 Console","description":"### Impact\nH2 Console in versions since 1.1.100 (2008-10-14) to 2.0.204 (2021-12-21) inclusive allows loading of custom classes from remote servers through JNDI.\n\nH2 Console doesn't accept remote connections by default. If remote access was enabled explicitly and some protection method (such as security constraint) wasn't set, an intruder can load own custom class and execute its code in a process with H2 Console (H2 Server process or a web server with H2 Console servlet).\n\nIt is also possible to load them by creation a linked table in these versions, but it requires `ADMIN` privileges and user with `ADMIN` privileges has full access to the Java process by design. These privileges should never be granted to untrusted users.\n\n### Patches\nSince version 2.0.206 H2 Console and linked tables explicitly forbid attempts to specify LDAP URLs for JNDI. Only local data sources can be used.\n\n### Workarounds\nH2 Console should never be available to untrusted users.\n\n`-webAllowOthers` is a dangerous setting that should be avoided.\n\nH2 Console Servlet deployed on a web server can be protected with a security constraint:\nhttps://h2database.com/html/tutorial.html#usingH2ConsoleServlet\nIf `webAllowOthers` is specified, you need to uncomment and edit `\u003csecurity-role\u003e` and `\u003csecurity-constraint\u003e` as necessary. See documentation of your web server for more details.\n\n### References\nThis issue was found and privately reported to H2 team by [JFrog Security](https://www.jfrog.com/)'s vulnerability research team with detailed information.\n","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2022-01-06T23:55:09.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://github.com/h2database/h2database/security/advisories/GHSA-h376-j262-vhq6","https://github.com/h2database/h2database/releases/tag/version-2.0.206","https://nvd.nist.gov/vuln/detail/CVE-2021-42392","https://jfrog.com/blog/the-jndi-strikes-back-unauthenticated-rce-in-h2-database-console/","https://security.netapp.com/advisory/ntap-20220119-0001/","https://lists.debian.org/debian-lts-announce/2022/02/msg00017.html","https://www.debian.org/security/2022/dsa-5076","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.secpod.com/blog/log4shell-critical-remote-code-execution-vulnerability-in-h2database-console/","https://github.com/advisories/GHSA-h376-j262-vhq6"],"source_kind":"github","identifiers":["GHSA-h376-j262-vhq6","CVE-2021-42392"],"repository_url":"https://github.com/h2database/h2database","blast_radius":0.0,"created_at":"2022-12-21T16:12:39.157Z","updated_at":"2026-09-30T09:17:50.324Z","epss_percentage":0.83176,"epss_percentile":0.99662,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oMzc2LWoyNjItdmhxNs0g_w","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1oMzc2LWoyNjItdmhxNs0g_w","packages":[{"ecosystem":"maven","package_name":"com.h2database:h2","versions":[{"first_patched_version":"2.0.206","vulnerable_version_range":"\u003e= 1.1.100, \u003c 2.0.206"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oMzc2LWoyNjItdmhxNs0g_w/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS03cnBqLWhnNDctY3g2Ms0auA","url":"https://github.com/advisories/GHSA-7rpj-hg47-cx62","title":"Improper Restriction of XML External Entity Reference in com.h2database:h2.","description":"H2 is an embeddable RDBMS written in Java. The package com.h2database:h2 from 1.4.198 and before 2.0.202 are vulnerable to XML External Entity (XXE) Injection via the org.h2.jdbc.JdbcSQLXML class object, when it receives parsed string data from org.h2.jdbc.JdbcResultSet.getSQLXML() method. If it executes the getSource() method when the parameter is DOMSource.class it will trigger the vulnerability.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-12-16T14:29:57.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2021-23463","https://github.com/h2database/h2database/issues/3195","https://github.com/h2database/h2database/pull/3199","https://github.com/h2database/h2database/commit/d83285fd2e48fb075780ee95badee6f5a15ea7f8%23diff-008c2e4462609982199cd83e7cf6f1d6b41296b516783f6752c44b9f15dc7bc3","https://snyk.io/vuln/SNYK-JAVA-COMH2DATABASE-1769238","https://github.com/h2database/h2database/pull/3199#issuecomment-1002830390","https://github.com/boris-unckel/h2database/commit/f9ad6aef2bfa59eba2b4d3e7c4c32d2cce8e8b05","https://security.netapp.com/advisory/ntap-20230818-0010/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://github.com/advisories/GHSA-7rpj-hg47-cx62"],"source_kind":"github","identifiers":["GHSA-7rpj-hg47-cx62","CVE-2021-23463"],"repository_url":"https://github.com/h2database/h2database","blast_radius":0.0,"created_at":"2022-12-21T16:12:40.773Z","updated_at":"2026-10-04T01:12:05.668Z","epss_percentage":0.02787,"epss_percentile":0.85929,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03cnBqLWhnNDctY3g2Ms0auA","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03cnBqLWhnNDctY3g2Ms0auA","packages":[{"ecosystem":"maven","package_name":"com.h2database:h2","versions":[{"first_patched_version":"2.0.202","vulnerable_version_range":"\u003e= 1.4.198, \u003c 2.0.202"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03cnBqLWhnNDctY3g2Ms0auA/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.h2database:h2","docker_dependents_count":5993,"docker_downloads_count":2178137617,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.h2database:h2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.h2database:h2/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2026-10-01T19:26:35.361Z","issues_count":436,"pull_requests_count":235,"avg_time_to_close_issue":22460911.872093022,"avg_time_to_close_pull_request":1601424.2834224598,"issues_closed_count":258,"pull_requests_closed_count":187,"pull_request_authors_count":61,"issue_authors_count":320,"avg_comments_per_issue":3.5940366972477062,"avg_comments_per_pull_request":0.8468085106382979,"merged_pull_requests_count":152,"bot_issues_count":0,"bot_pull_requests_count":1,"past_year_issues_count":52,"past_year_pull_requests_count":55,"past_year_avg_time_to_close_issue":1795138.2068965517,"past_year_avg_time_to_close_pull_request":583638.8571428572,"past_year_issues_closed_count":29,"past_year_pull_requests_closed_count":35,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":43,"past_year_avg_comments_per_issue":2.5576923076923075,"past_year_avg_comments_per_pull_request":1.290909090909091,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":30,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/h2database%2Fh2database/issues","maintainers":[{"login":"svladykin","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/svladykin"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.h2database:h2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.h2database:h2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.h2database:h2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.h2database:h2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.h2database:h2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.h2database:h2/codemeta","maintainers":[]}