Andre Schlegel-Tylla created CXF-8901:
-----------------------------------------

             Summary: Update Guava to 32.1.1 (solving CVE-2023-2976)
                 Key: CXF-8901
                 URL: https://issues.apache.org/jira/browse/CXF-8901
             Project: CXF
          Issue Type: Improvement
            Reporter: Andre Schlegel-Tylla


Currently Guava 30.1-re 
([https://github.com/apache/cxf/blob/f615b09bf9eaffc532ba08dcf198eb831b6f484f/parent/pom.xml#L123)]
 is used.

 

Our dependency checker shows a potential security issue CVE-2023-2976 with this 
version.

 

Please update Guava at least to 32.0.1 (recommended version in the CVE).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to