microsoft/mssql-jdbc v12.2.1
microsoft/mssql-jdbc
Captured source
source ↗published Oct 15, 2025seen Jun 26captured 2whttp 200method plain
[12.2.1] Hotfix & Stable Release
Repository: microsoft/mssql-jdbc
Tag: v12.2.1
Published: 2025-10-15T11:24:50Z
Prerelease: no
Release notes:
Fixed issues
- Address a hostname validation vulnerability by securely parsing certificate common names. #2798
What was fixed: Secure hostname validation is enforced by replacing the vulnerable CN parsing logic in SQLServerCertificateUtils.java, preventing spoofing attacks. Who benefits: All users of the SQL Server JDBC driver, especially those relying on TLS for secure connections, benefit from improved certificate validation.