[CASSANDRA-14760] CVE-2018-10237 Security vulnerability in 3.11.3

• Type: Bug
• Status: Resolved
• Priority: Normal
• Resolution: Not A Problem
• Component/s: Dependencies
• Severity: Normal
• Assignee: Unassigned
• Reporter: John F. Gbruoski
• Created: 18/Sep/18 16:11
• Updated: 12/Jun/19 15:36
• Resolved: 20/Sep/18 13:20

Description

As described in the CVE, Guava 11.0 through 24.x before 24.1.1 have a security exposure. Cassandra 3.11.3 uses Guava 18.0. Can Cassandra 3.11 be patched to support Guava  24.1.1 or later?