swaldman c3p0

• CVE-2026-55223 Medium 6.3 c3p0 exposes a deserialization "sink" via JDBC DataSource bean properties 0.5%
• CVE-2026-27830 High 8.0 c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property 0.6%