[JCLOUDS-1470] Vulnarable Guava dependency dragged from jclouds-driver

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.1.1
• Component/s: jclouds-core
• Labels: guava
• Assignee: Unassigned
• Reporter: Blagoi Anastasov
• Created: 05/Dec/18 15:22
• Updated: 3 days ago 09:13

Description

It looks like jclouds-driver drags old(from 2014) and vulnerable guava dependency - 18.0.

https://nvd.nist.gov/view/vuln/search-results?adv_search=true&cves=on&cpe_version=cpe%3A%2Fa%3Agoogle%3Aguava%3A18.0