Update Guava dependency to address security vulnerabilities (CVE-2020-8908, GHSA-7g45-4rm6-3mm3) #1171

Open

Description

opened

Issue: Vulnerable Guava dependency in google-oauth-client 1.39.0

Current: Ships with Guava 31.1-android (vulnerable)
Recommended: Update to Guava 32.0.1-android or newer

Vulnerabilities:

Impact: Forces developers to manually override transitive dependencies for security compliance.

Request: Please update Guava dependency in next release.

to join this conversation on GitHub. Already have an account? Sign in to comment

No one assigned

No labels

No type

No projects

No milestone

None yet

No branches or pull requests