Skip to content

[GHSA-rcjc-c4pj-xxrp] Apache Derby: LDAP injection vulnerability in authenticator - #10200

Open
benoitbayol wants to merge 1 commit into
benoitbayol/advisory-improvement-10200from
benoitbayol-GHSA-rcjc-c4pj-xxrp
Open

benoitbayol wants to merge 1 commit into
benoitbayol/advisory-improvement-10200from
benoitbayol-GHSA-rcjc-c4pj-xxrp

Conversation

@benoitbayol

Copy link
Copy Markdown

Updates

  • Affected products

Comments
the package 10.14.2.1 does not exist. The link of Maven where onto https://central.sonatype.com/artifact/org.apache.derby/derby/10.17.1.0 (like for others)

Copilot AI balanced review requested due to automatic review settings October 7, 2026 07:52
@github-actions
github-actions Bot changed the base branch from main to benoitbayol/advisory-improvement-10200 October 7, 2026 07:52

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

The deletion incorrectly removes vulnerable version 10.14.2.0 from the advisory.

Review effort: Balanced
Findings: 1 High severity

Open (1)
What changed in this PR

Updates the Apache Derby advisory’s affected-product data.

Changes:

  • Removes the range ending at nonexistent version 10.14.2.1.
  • Updates the modification timestamp.
File Description
GHSA-rcjc-c4pj-xxrp.json Updates Derby affected versions.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

"10.14.2.0"
]
},
{
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants