# Nexus RM3 OSS h2 vulnerability

**URL:** <https://community.sonatype.com/t/nexus-rm3-oss-h2-vulnerability/9179>\
**Category:** Sonatype Nexus Repository\
**Tags:** oss, nexus-repository, vulnerabilities, database\
**Created:** [August 22, 2022, 3:49pm UTC](https://community.sonatype.com/t/nexus-rm3-oss-h2-vulnerability/9179 "2022-08-22T15:49:46Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![atharva.inamdar](https://avatars.discourse-cdn.com/v4/letter/a/c6cbf5/32.png) [@atharva.inamdar](https://community.sonatype.com/u/atharva.inamdar)\
**Post date:** [August 22, 2022, 3:49pm UTC](https://community.sonatype.com/t/nexus-rm3-oss-h2-vulnerability/9179/1 "2022-08-22T15:49:46Z")

</div>

NXRM3 version: 3.41.1-01  
h2 DB: 1.4.200

Current version of h2 DB contains a few critical vulnerabilities:

1. CVE-2021-23463
2. CVE-2021-42392
3. CVE-2022-23221

It seems these are fixed in latest 2.0.206+ versions.

What’s the process to get this upgraded? Is this already tracked?

Regards,  
Atharva

---

_[View the full topic](https://community.sonatype.com/t/nexus-rm3-oss-h2-vulnerability/9179)._