+1 to this. 

Whatsmore, guava 20.0 is affected by vulnerability: 
[CVE-2018-10237](https://github.com/google/guava/wiki/CVE-2018-10237).

I came here to ask, if possible, to upgrade guava version but it's removable, 
much better.

[ Full content available at: https://github.com/apache/maven/pull/182 ]
This message was relayed via gitbox.apache.org for [email protected]

Reply via email to