[hibernate-issues] [JIRA] (HHH-14077) CVE-2019-14900 SQL injection issue using JPA Criteria API

Will Dazey ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=6183fd9... ) *commented* on HHH-14077 ( https://hibernate.atlassian.net/browse/HHH-14077?atlOrigin=eyJpIjoiOTIwND... ) Re: CVE-2019-14900 SQL injection issue using JPA Criteria API ( https://hibernate.atlassian.net/browse/HHH-14077?atlOrigin=eyJpIjoiOTIwND... ) Is this security vulnerability applicable to Hibernate 4.2? If so, ss there any plan to backport this fix to Hibernate 4.2? ( https://hibernate.atlassian.net/browse/HHH-14077#add-comment?atlOrigin=ey... ) Add Comment ( https://hibernate.atlassian.net/browse/HHH-14077#add-comment?atlOrigin=ey... ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.... ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=Em... ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100214- sha1:02c55de )