fix(sec): upgrade com.google.guava:guava to 30.0-jre - Githubissues

MyCATApache / Mycat-Server

GNU General Public License v2.0

9.51k stars 3.85k forks source link

fix(sec): upgrade com.google.guava:guava to 30.0-jre #2928

Open 645775992 opened 2 years ago

645775992 commented 2 years ago

What happened？

There are 1 security vulnerabilities found in com.google.guava:guava 28.2-jre

CVE-2020-8908

What did I do？

Upgrade com.google.guava:guava from 28.2-jre to 30.0-jre for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS