New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
CVE-2020-8908 guava: local information disclosure via temporary directory created with unsafe permissions #3494
Comments
ppalaga
added a commit
to ppalaga/camel-quarkus
that referenced
this issue
Jan 26, 2022
…tory created with unsafe permissions apache#3494
jamesnetherton
pushed a commit
that referenced
this issue
Jan 27, 2022
…tory created with unsafe permissions #3494
ppalaga
added a commit
to ppalaga/camel-quarkus
that referenced
this issue
Jan 27, 2022
…tory created with unsafe permissions apache#3494
ppalaga
added a commit
to ppalaga/camel-quarkus
that referenced
this issue
Jan 27, 2022
…tory created with unsafe permissions apache#3494
ppalaga
added a commit
to ppalaga/camel-quarkus
that referenced
this issue
Jan 27, 2022
…tory created with unsafe permissions apache#3494
ppalaga
added a commit
to jboss-fuse/camel-quarkus
that referenced
this issue
Jan 27, 2022
…tory created with unsafe permissions apache#3494
ppalaga
added a commit
that referenced
this issue
Jan 27, 2022
…tory created with unsafe permissions #3494
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
https://nvd.nist.gov/vuln/detail/CVE-2020-8908
The CVE is published since 12/10/2020. We still manage guava 29.0-jre in our BOM. We should try to upgrade to 30.1.1-jre that is also used by quarkus-bootstrap
The text was updated successfully, but these errors were encountered: