Bret McGuire created CASSJAVA-53:
------------------------------------
Summary: Update Guava version used in cassandra-java-driver
Key: CASSJAVA-53
URL: https://issues.apache.org/jira/browse/CASSJAVA-53
Project: Apache Cassandra Java driver
Issue Type: Task
Reporter: Bret McGuire
Once java-driver-shaded-guava is brought in to the project (see CASSJAVA-52) we
need to look into an upgrade to the version of Guava it provides. There are at
least a couple known CVEs that affect Guava 25.1:
[CVE-2020-8908|https://nvd.nist.gov/vuln/detail/CVE-2020-8908]
[CVE-2023-2976|https://nvd.nist.gov/vuln/detail/CVE-2023-2976]
See [JAVA-3103|https://datastax-oss.atlassian.net/browse/JAVA-3103] for some
additional context here.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
