Upgrade Guava to 32.0.1-jre

codehaus-plexus · May 5, 2024 · becc9c4 · becc9c4
1 parent dee13d6
commit becc9c4
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -34,6 +34,17 @@
  <project.build.outputTimestamp>2023-12-14T13:10:41Z</project.build.outputTimestamp>
  </properties>
 
+ <dependencyManagement>
+ <dependencies>
+ <dependency>
+ <groupId>com.google.guava</groupId>
+ <artifactId>guava</artifactId>
+ <!-- overwrite due to CVE-2023-2976 in Guice transitive dependencies -->
+ <version>32.0.1-jre</version>
+ </dependency>
+ </dependencies>
+ </dependencyManagement>
+
  <dependencies>
  <dependency>
  <groupId>org.eclipse.sisu</groupId>