## Critical Vulnerability Information ### Vulnerability Description - **Title**: mchange-commons-java prior to v0.4.0 can be dangerously abused to download and execute malicious code - **Publisher**: swaldman - **CVE ID**: CVE-2026-27727 - **Publication Date**: 2 days ago ### Vulnerability Impact - **Affected Versions**: = 0.4.0 and avoid using earlier versions. ### References - [c3p0, you little rascal — Hans-Martin Münch](c3p0, you little rascal) - [c3p0 documentation, security note](c3p0 documentation, security note) - [c3p0 documentation, configuring security](c3p0 documentation, configuring security)