You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@cxf.apache.org by "Andre Schlegel-Tylla (Jira)" <ji...@apache.org> on 2023/07/11 09:21:00 UTC

[jira] [Created] (CXF-8901) Update Guava to 32.1.1 (solving CVE-2023-2976)

Andre Schlegel-Tylla created CXF-8901:
-----------------------------------------

             Summary: Update Guava to 32.1.1 (solving CVE-2023-2976)
                 Key: CXF-8901
                 URL: https://issues.apache.org/jira/browse/CXF-8901
             Project: CXF
          Issue Type: Improvement
            Reporter: Andre Schlegel-Tylla


Currently Guava 30.1-re ([https://github.com/apache/cxf/blob/f615b09bf9eaffc532ba08dcf198eb831b6f484f/parent/pom.xml#L123)] is used.

 

Our dependency checker shows a potential security issue CVE-2023-2976 with this version.

 

Please update Guava at least to 32.0.1 (recommended version in the CVE).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)