[JCLOUDS-1470] Vulnarable Guava dependency dragged from jclouds-driver

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.1
• Fix Version/s: 2.3.0
• Component/s: jclouds-core
• Labels: guava
• Assignee: Andrew Gaul
• Reporter: Blagoi Anastasov
• Created: 05/Dec/18 15:22
• Updated: 24/Jun/20 23:13
• Resolved: 24/Jun/20 23:13

Description

It looks like jclouds-driver drags old(from 2014) and vulnerable guava dependency - 18.0.

https://nvd.nist.gov/view/vuln/search-results?adv_search=true&cves=on&cpe_version=cpe%3A%2Fa%3Agoogle%3Aguava%3A18.0