Commit 22730ca
fix: upgrade MySQL Connector to fix CVE-2023-22102 (GreenButtonAlliance#35)
- Replace deprecated mysql:mysql-connector-java with com.mysql:mysql-connector-j
- Upgrade from 8.0.32 (vulnerable) to 9.1.0 (secure)
- Fixes CVE-2023-22102: MySQL Connectors takeover vulnerability
- Aligns with datacustodian and thirdparty modules using 9.1.0
- All tests pass with new connector version
Resolves Dependabot alert GreenButtonAlliance#8
GHSA-m6vm-37g8-gqvh
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-authored-by: Claude Sonnet 4.5 <[email protected]>1 parent b2253b6 commit 22730ca
1 file changed
+3
-3
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
409 | 409 | | |
410 | 410 | | |
411 | 411 | | |
412 | | - | |
413 | | - | |
414 | | - | |
| 412 | + | |
| 413 | + | |
| 414 | + | |
415 | 415 | | |
416 | 416 | | |
417 | 417 | | |
| |||
0 commit comments