Skip to content

Commit 22730ca

Browse files
dfcoffinclaude
andauthored
fix: upgrade MySQL Connector to fix CVE-2023-22102 (GreenButtonAlliance#35)
- Replace deprecated mysql:mysql-connector-java with com.mysql:mysql-connector-j - Upgrade from 8.0.32 (vulnerable) to 9.1.0 (secure) - Fixes CVE-2023-22102: MySQL Connectors takeover vulnerability - Aligns with datacustodian and thirdparty modules using 9.1.0 - All tests pass with new connector version Resolves Dependabot alert GreenButtonAlliance#8 GHSA-m6vm-37g8-gqvh 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Sonnet 4.5 <[email protected]>
1 parent b2253b6 commit 22730ca

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

openespi-common/pom.xml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -409,9 +409,9 @@
409409

410410
<!-- add dependency for mysql-->
411411
<dependency>
412-
<groupId>mysql</groupId>
413-
<artifactId>mysql-connector-java</artifactId>
414-
<version>8.0.32</version>
412+
<groupId>com.mysql</groupId>
413+
<artifactId>mysql-connector-j</artifactId>
414+
<version>9.1.0</version>
415415
<scope>test</scope>
416416
</dependency>
417417

0 commit comments

Comments
 (0)