Merge pull request #3847 from swagger-api/CVE-2020-8908

refs CVE-2020-8908 - bump test dep guava
swagger-api · Dec 28, 2020 · ed916e8 · ed916e8
2 parents d5ca168 + 30c398d
commit ed916e8
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/modules/swagger-gradle-plugin/build.gradle b/modules/swagger-gradle-plugin/build.gradle
@@ -27,7 +27,7 @@ dependencies {
     testImplementation gradleTestKit()
     testImplementation 'com.github.tomakehurst:wiremock:2.27.2'
     testImplementation 'javax.servlet:javax.servlet-api:3.1.0'
-    testImplementation 'com.google.guava:guava:27.0.1-jre'
+    testImplementation 'com.google.guava:guava:30.1-jre'
     testImplementation 'javax.ws.rs:javax.ws.rs-api:2.1'
     testImplementation "io.swagger.core.v3:swagger-jaxrs2:${project.version}"
     testImplementation 'junit:junit:4+'

diff --git a/pom.xml b/pom.xml
@@ -568,7 +568,7 @@
         <jackson-version>2.11.1</jackson-version>
         <logback-version>1.2.3</logback-version>
         <classgraph-version>4.8.95</classgraph-version>
-        <guava-version>27.0.1-jre</guava-version>
+        <guava-version>30.1-jre</guava-version>
         <ant-version>1.10.9</ant-version>
         <commons-lang-version>3.7</commons-lang-version>
         <commons-io-version>2.6</commons-io-version>