[MNG-7828] Bump guava from 31.1-jre to 32.0.1-jre

• Type: Dependency upgrade
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.9.x-candidate, 4.0.x-candidate
• Fix Version/s: 3.9.4, 4.0.0-alpha-8, 4.0.0
• Component/s: Dependencies
• Assignee: Guillaume Nodet
• Reporter: Bruno Volpato
• Created: 28/Jun/23 01:42
• Updated: 20/Oct/23 07:57
• Resolved: 11/Jul/23 14:41

Description

Currently used version is in the range of CVE-2023-2976, which was fixed in 32.0.0.

 

Please check https://osv.dev/vulnerability/GHSA-7g45-4rm6-3mm3 for more information.

Issue Links

• links to: GitHub Pull Request #1189
• links to: GitHub Pull Request #1191