{"action":"Upgrade com.google.guava:guava to 32.0.0-android or later.","affected":[{"fixed":"32.0.0-android","introduced":"1.0"}],"component":"com.google.guava:guava","cve_ids":["CVE-2023-2976"],"ecosystem":"Maven","epss":0.00248,"exploited":false,"fixed_versions":["32.0.0-android"],"ghsa_id":"GHSA-7g45-4rm6-3mm3","id":"tcs_01M5N8JAHM9X8VDKBSBRBEAWX9","modified_at":"2026-09-10T03:49:53.859811124Z","published_at":"2023-06-14T18:30:38Z","references":["https://osv.dev/vulnerability/GHSA-7g45-4rm6-3mm3","https://nvd.nist.gov/vuln/detail/CVE-2023-2976","https://github.com/google/guava/issues/2575","https://github.com/google/guava/issues/6532","https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284","https://github.com/google/guava","https://github.com/google/guava/releases/tag/v32.0.0","https://security.netapp.com/advisory/ntap-20230818-0008","https://security.netapp.com/advisory/ntap-20241108-0002","https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01006.html"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-7g45-4rm6-3mm3","url":"https://osv.dev/vulnerability/GHSA-7g45-4rm6-3mm3"}],"summary":"Guava vulnerable to insecure use of temporary directory"}