[ https://issues.apache.org/jira/browse/CURATOR-502?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16755978#comment-16755978 ]
ASF GitHub Bot commented on CURATOR-502: ---------------------------------------- Github user dawinter commented on the issue: https://github.com/apache/curator/pull/302 Sure, everything that's update the version is ok for me. > Update dependency com.google.guava:guava of org.apache.curator:curator-client > ----------------------------------------------------------------------------- > > Key: CURATOR-502 > URL: https://issues.apache.org/jira/browse/CURATOR-502 > Project: Apache Curator > Issue Type: Bug > Components: Client > Affects Versions: 4.1.0 > Reporter: DW > Priority: Major > > Please update the dependency com.google.guava:guava of > org.apache.curator:curator-client due to open security vulnerability of the > used com.google.guava:guava 20.0 [(including) 11.0 up to (excluding) 24.1.1]. > Please upgrade to 24.1.1+. If you need the CVE number, let me know. -- This message was sent by Atlassian JIRA (v7.6.3#76005)