CVE-2023-2976
1 advisory.
Maven/com.google.guava:guava CVE-2023-2976: medium 5.5
Guava vulnerable to insecure use of temporary directory
Action: Upgrade com.google.guava:guava to 32.0.0-android or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0 | 32.0.0-android | - |
Fixed versions
| 32.0.0-android |
Sources
- osv: GHSA-7g45-4rm6-3mm3
- https://nvd.nist.gov/vuln/detail/CVE-2023-2976
- https://github.com/google/guava/issues/2575
- https://github.com/google/guava/issues/6532
- https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284
- https://github.com/google/guava
- https://github.com/google/guava/releases/tag/v32.0.0
- https://security.netapp.com/advisory/ntap-20230818-0008
- https://security.netapp.com/advisory/ntap-20241108-0002
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01006.html
CVE-2023-2976 · published · modified · JSON