Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.google.guava/guava@23.0-rc1-android
purl pkg:maven/com.google.guava/guava@23.0-rc1-android
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.7
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-5mg8-w23w-74h3
Aliases:
CVE-2020-8908
Information Disclosure in Guava A temp directory creation vulnerability exists in Guava prior to version 32.0.0 allowing an attacker with …
32.0.0-android
Vulnerable
GHSA-7g45-4rm6-3mm3
Aliases:
CVE-2023-2976
Guava vulnerable to insecure use of temporary directory Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in …
32.0.0-android
Vulnerable
GHSA-mvr2-9pj6-7w5j
Aliases:
CVE-2018-10237
Denial of Service in Google Guava Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers …
24.1.1-android
Vulnerable
CVE-2018-10237

Deserialization of Untrusted Data Unbounded memory allocation allows remote attackers to conduct denial of service attacks against servers that depend …
24.1.1-android
Vulnerable
24.1.1-jre
Vulnerable
GHSA-xxph-c9ww-hj94
Aliases:
CVE-2026-102554
Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation # CompactHashMap/CompactHashSet/MapMakerInternalMap native deserialization triggers uncontrolled memory allocation ## Summary `CompactHashMap`, `CompactHashSet`, … There are no reported fixed by versions.
This package is not known to fix any advisories.