{"action":"Upgrade com.h2database:h2 to 2.0.202 or later.","affected":[{"fixed":"2.0.202","introduced":"1.4.198"}],"component":"com.h2database:h2","cve_ids":["CVE-2021-23463"],"ecosystem":"Maven","epss":0.02787,"exploited":false,"fixed_versions":["2.0.202"],"ghsa_id":"GHSA-7rpj-hg47-cx62","id":"tcs_01M5N8K4ZM3WNAMQF6VPD2114M","modified_at":"2026-07-08T06:49:52.637264990Z","published_at":"2021-12-16T14:29:57Z","references":["https://osv.dev/vulnerability/GHSA-7rpj-hg47-cx62","https://nvd.nist.gov/vuln/detail/CVE-2021-23463","https://github.com/h2database/h2database/issues/3195","https://github.com/h2database/h2database/pull/3199","https://github.com/h2database/h2database/pull/3199#issuecomment-1002830390","https://github.com/boris-unckel/h2database/commit/f9ad6aef2bfa59eba2b4d3e7c4c32d2cce8e8b05","https://github.com/h2database/h2database/commit/d83285fd2e48fb075780ee95badee6f5a15ea7f8%23diff-008c2e4462609982199cd83e7cf6f1d6b41296b516783f6752c44b9f15dc7bc3","https://github.com/h2database/h2database","https://security.netapp.com/advisory/ntap-20230818-0010","https://snyk.io/vuln/SNYK-JAVA-COMH2DATABASE-1769238","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-7rpj-hg47-cx62","url":"https://osv.dev/vulnerability/GHSA-7rpj-hg47-cx62"}],"summary":"Improper Restriction of XML External Entity Reference in com.h2database:h2."}