Details
-
Technical Debt
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
1.13.5, 1.14.3, 1.15.0
Description
Two security vulnerabilities in H2 Console (CVE-2022-23221 and possible DNS rebinding attack) are fixed in 2.0.120. Flink is currently on 2.0.206 since https://issues.apache.org/jira/browse/FLINK-25576
Note: Flink is using this dependency only for testing, so it's not directly impacted by the CVE. We just want to be good citizens and update our dependencies