Search for packages
| purl | pkg:maven/com.google.guava/guava@23.3-android |
| Next non-vulnerable version | 32.0.0-android |
| Latest non-vulnerable version | 32.0.0-android |
| Risk |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-jbuu-hpb4-3fa4
Aliases: CVE-2018-10237 GHSA-mvr2-9pj6-7w5j |
Deserialization of Untrusted Data Unbounded memory allocation allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the `AtomicDoubleArray` class (when serialized with Java serialization) and the `CompoundOrdering` class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-sryb-6ssf-2ff1
Aliases: CVE-2020-8908 GHSA-5mg8-w23w-74h3 |
Information Disclosure in Guava A temp directory creation vulnerability exists in Guava prior to version 32.0.0 allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava `com.google.common.io.Files.createTempDir()`. The permissions granted to the directory created default to the standard unix-like /tmp ones, leaving the files open. Maintainers recommend explicitly changing the permissions after the creation of the directory, or removing uses of the vulnerable method. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-04T20:47:32.804230+00:00 | GitLab Importer | Affected by | VCID-sryb-6ssf-2ff1 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.google.guava/guava/CVE-2020-8908.yml | 38.6.0 |
| 2026-06-04T20:11:57.691500+00:00 | GitLab Importer | Affected by | VCID-jbuu-hpb4-3fa4 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.google.guava/guava/CVE-2018-10237.yml | 38.6.0 |