The JSTL spec artifact contain implementation code forked from the Apache taglib project.

One bug fixed upstreak since the fork is https://issues.apache.org/bugzilla/show_bug.cgi?id=17388, which can cause prepared statement and/or result set objects not to be closed correctly.

The fix can be cherry-picked from (http://svn.apache.org/viewvc/jakarta/taglibs/proper/standard/trunk/src/org/apache/taglibs/standard/tag/common/sql/QueryTagSupport.java?view=diff&r1=499149&r2=499150&pathrev=499150), unless there was a plan to rebase on the recently released upstream 1.2.1 which includes the fix