Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Vulnerable dependency guava:30.1.jre #286

Open
aschufft opened this issue Sep 6, 2023 · 3 comments
Open

Vulnerable dependency guava:30.1.jre #286

aschufft opened this issue Sep 6, 2023 · 3 comments

Comments

@aschufft
Copy link

aschufft commented Sep 6, 2023

There is a dependency to com.google.guava:guava:30.1-jre which is known as vulnerable CVE-2023-2976
@melloware
Copy link

Two open PR's to fix it. Just waiting on @mikesamuel to merge and release.

#272

#284

@melloware
Copy link

This can be closed. Guava has been removed

@benzman81
Copy link

When will there be a new release with the removal of guava? @mvsamuel @manicode @mikesamuel
It is preventing the use of this tool and thus breaking our releases.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@melloware @benzman81 @aschufft