Skip to content

Commit e64986b

Browse files
committed
Downgrade Guava to 25.1-jre.
Otherwise, we run into java-json-tools/json-schema-core#59. It still is beyond 24.1.1, which has [CVE-2018-10237](https://nvd.nist.gov/vuln/detail/CVE-2018-10237).
1 parent f386320 commit e64986b

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

project.gradle

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ targetCompatibility = JavaVersion.VERSION_1_6; // defaults to sourceCompatibilit
3030
*/
3131
dependencies {
3232
implementation(group: "com.fasterxml.jackson.core", name: "jackson-databind", version: "2.9.9");
33-
implementation(group: "com.google.guava", name: "guava", version: "28.1-jre");
33+
implementation(group: "com.google.guava", name: "guava", version: "25.1-jre");
3434
implementation(group: "com.github.fge", name: "msg-simple", version: "1.1");
3535
implementation(group: "com.google.code.findbugs", name: "jsr305", version: "2.0.1");
3636
testImplementation(group: "org.testng", name: "testng", version: "6.8.7") {

0 commit comments

Comments
 (0)