[JDBC-V2] Make `DatabaseMetaDataImpl` use `PreparedStatement`.

Open

#2,739 opened on Feb 9, 2026 0 comments 0 reactions 0 assignees View on GitHub

area:jdbc-metadata jdbc-v2

Description

## Description

There are many places in `DatabaseMetaDataImpl` that construct a dynamic query. It is wrong because leads to a security issue.

- All queries should use `PreparedStatement`
- Where is it no possible - should be reviewed and needed escaping should be added

This issue has not been assessed yet.