Amazon Linux 2023 : guava, guava-javadoc, guava-testlib (ALAS2023-2026-3419)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3419 advisory. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via...