Researchers have warned of a new, critical Java flaw impacting the console of the popular H2 Java SQL database with the same root cause as the Log4Shell vulnerability in Apache Log4j.

H2 is a widely-used open-source Java SQL database used for various projects ranging from web platforms like Spring Boot to IoT platforms like ThingWorks.

IT administrators with the open-source Java-based H2 SQL database in their environments are being urged to update to the latest version after the discovery of an "extremely critical" vulnerability ...

H2 is an open-source relational database management system written in Java. It can be embedded in Java applications or run in client-server mode.

Critical flaw in the H2 open-source Java SQL database are similar to the Log4J vulnerability, but do not pose a widespread threat.

All H2 users should upgrade to the newest version 2.0.206 which is patched for the flaw Researchers at software company JFrog have uncovered a new vulnerability affecting H2 database consoles that ...