didi / VirtualAPK

A powerful and lightweight plugin framework for Android
Apache License 2.0
8.98k stars 1.52k forks source link

There is a vulnerability in guava:19.0 ,upgrade recommended #382

Open QiAnXinCodeSafe opened 3 years ago

QiAnXinCodeSafe commented 3 years ago

https://github.com/didi/VirtualAPK/blob/b1a778a06688f89f574ec8608f0764eadb9009b7/virtualapk-gradle-plugin/build.gradle#L42

CVE-2018-10237

Recommended upgrade version:24.1.1.jre