Closed ivmaykov closed 10 months ago
The guava 31.1-jre dependency has 2 CVEs, which are fixed in 32.0.1-jre. This version was also already a transitive dependency via dropwizard, so depending on it directly doesn't actually introduce any new dependencies.
The guava 31.1-jre dependency has 2 CVEs, which are fixed in 32.0.1-jre. This version was also already a transitive dependency via dropwizard, so depending on it directly doesn't actually introduce any new dependencies.