samqdemocorp-mend / box_mojito_lvp

Apache License 2.0
0 stars 0 forks source link

Update dependency com.google.guava:guava to v32 - autoclosed #58

Closed mend-for-github-com[bot] closed 5 months ago

mend-for-github-com[bot] commented 5 months ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
com.google.guava:guava 21.0 -> 32.0.1-android age adoption passing confidence

By merging this PR, the issue #6 will be automatically resolved and closed:

Severity CVSS Score CVE Reachability
High High 8.4 CVE-2023-2976

Reachable

High High 8.2 CVE-2018-10237

Unreachable

Medium Medium 4.8 CVE-2020-8908

Reachable


Release Notes

google/guava (com.google.guava:guava) ### [`v23.0`](https://togithub.com/google/guava/releases/tag/v23.0): 23.0 Final [Guava 23.0](https://togithub.com/google/guava/wiki/Release23) release. ### [`v22.0`](https://togithub.com/google/guava/releases/tag/v22.0): 22.0 [Compare Source](https://togithub.com/google/guava/compare/v21.0...v22.0) Final [Guava 22.0](https://togithub.com/google/guava/wiki/Release22) release.