[CASSANDRA-19140] Security vulnerabilities in google-guava In Cassandra (CVE-2023-2976)

• Type: Bug
• Status: Resolved
• Priority: Urgent
• Resolution: Duplicate
• Bug Category: Security
• Severity: Critical
• Platform: All
• Assignee: Unassigned
• Reporter: Kapil Shewate
• Created: 01/Dec/23 10:14
• Updated: 01/Dec/23 11:51
• Resolved: 01/Dec/23 11:51

Description

Security vulnerabilities in google-guava In Cassandra (CVE-2023-2976)

Component name - google-guava
Component version name - v27.0
CVE - CVE-2023-2976 (BDSA-2016-1748)
CVSS - 7.1 (High)

Archive Context and Path
apache-cassandra/lib/guava-27.0-jre.jar

Issue Links

• duplicates: CASSANDRA-18562 guava vulnerability CVE-2023-2976