Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.google.guava/guava@1.0
purl pkg:maven/com.google.guava/guava@1.0
Tags Ghost
Next non-vulnerable version 32.0.0-android
Latest non-vulnerable version 32.0.0-android
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-fnpa-1sqy-u7hw
Aliases:
CVE-2023-2976
GHSA-7g45-4rm6-3mm3
Guava vulnerable to insecure use of temporary directory Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class. Even though the security vulnerability is fixed in version 32.0.0, maintainers recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.
32.0.0-android
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-02T16:59:40.681647+00:00 GHSA Importer Affected by VCID-fnpa-1sqy-u7hw https://github.com/advisories/GHSA-7g45-4rm6-3mm3 38.1.0
2026-04-01T12:51:24.600607+00:00 GitLab Importer Affected by VCID-fnpa-1sqy-u7hw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.google.guava/guava/CVE-2023-2976.yml 38.0.0