codingapi / tx-lcn

LCN distributed transaction framework, compatible with dubbo, spring cloud and Motan framework, supports various relational databases
https://www.codingapi.com
Apache License 2.0
4.22k stars 1.46k forks source link

fix(sec): upgrade com.google.guava:guava to 30.0-jre #578

Closed 645775992 closed 2 years ago

645775992 commented 2 years ago

What happened?

There are 1 security vulnerabilities found in com.google.guava:guava 19.0

What did I do?

Upgrade com.google.guava:guava from 19.0 to 30.0-jre for vulnerability fix

What did you expect to happen?

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS