[
https://issues.apache.org/jira/browse/CASSJAVA-83?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Bret McGuire updated CASSJAVA-83:
---------------------------------
Resolution: Won't Fix
Status: Resolved (was: Triage Needed)
> Update Guava version used in cassandra-java-driver 3.x branch
> -------------------------------------------------------------
>
> Key: CASSJAVA-83
> URL: https://issues.apache.org/jira/browse/CASSJAVA-83
> Project: Apache Cassandra Java driver
> Issue Type: Task
> Reporter: Brandon Bordeaux
> Priority: Normal
>
> Java driver 3.12.1 has some CVE's associated with the Guava version (16.0.1).
> CASSJAVA-53 updated Guava for the 4.x branch; this ticket requests the same
> be done for the 3.x branch.
> Vulnerabilities from Nessus Scan:
> * CVE-2023-2976
> * CVE-2018-10237
> * sonatype-2020-0926
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org
