microsoft/mssql-jdbc v12.8.2

[12.8.2] Hotfix & Stable Release

Repository: microsoft/mssql-jdbc

Tag: v12.8.2

Published: 2025-10-15T11:27:55Z

Prerelease: no

Release notes:

Fixed issues

• Address a hostname validation vulnerability by securely parsing certificate common names. https://github.com/microsoft/mssql-jdbc/pull/2804

What was fixed: Secure hostname validation is enforced by replacing the vulnerable CN parsing logic in SQLServerCertificateUtils.java, preventing spoofing attacks. Who benefits: All users of the SQL Server JDBC driver, especially those relying on TLS for secure connections, benefit from improved certificate validation.