Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

micronaut-projects/micronaut-sql

              7.2.x @ bd970cd
            

Fixes

CVEs

HIGH

Peak severity

100.0%

Coverage

Highlights

Dependency Vulnerability: 1 prior fix. Scrutinize any change in this area.

gradle/libs.versions.toml: most-fixed (1 issue). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Improper Certificate Validation: The Vert.x PG client previously failed to properly configure PEM trust certificates and preserve SSL mode, allowing improper certificate validation during connection setup. This is a direct TLS trust gap in the primary reactive PostgreSQL client.

Dependency Vulnerability: The managed PostgreSQL JDBC driver version 42.7.5 was vulnerable to CVE-2025-49146, fixed by upgrading to 42.7.7. This affects the synchronous JDBC path and is a supply-chain risk.