-
Component Upgrade
-
Resolution: Done
-
Major
-
None
-
None
Our current guava release has a CVE (CVE-2023-2976); update it.
Moving to 32.0.1 is sufficient to resolve the CVE but it seems reasonable to go to the latest release, 32.1.1.
31.1 -> 32.1.1 https://github.com/google/guava/compare/v31.1...v32.1.1
31.1 -> 32.0.1 https://github.com/google/guava/compare/v31.1...v32.0.1
32.0.1 -> 32.1.1 https://github.com/google/guava/compare/v32.0.1...v32.1.1
- is cloned by
-
JBERET-592 Upgrade Guava for 31.1 to 32.1.1 (resolves CVE-2023-2976)
-
- Resolved
-
-
-
- Closed
-
