CVE-2026-102554: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances,...

CLEANSTART-2026-AO34403 temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com

Security vulnerability affects the apache-hive package. A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com...

CLEANSTART-2026-NG64377 Unbounded memory allocation in Google Guava 11

Security vulnerability affects the apache-hive package. Unbounded memory allocation in Google Guava 11...

CLEANSTART-2026-NL20798 Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1

Security vulnerability affects the apache-hive package. Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1...

ROOT-APP-MAVEN-CVE-2023-2976 CVE-2023-2976 in com.google.guava:guava - Patched by Root

Root has patched CVE-2023-2976 in the com.google.guava:guava package for Root:Maven. Multiple fixed versions available...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: guava (UTSA-2023-002175)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002175 advisory. Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream...

Astra Linux – Vulnerability in guava-libraries

There is a vulnerability related to the creation of temporary directories in all versions of Guava. An attacker with access to the system can potentially access data stored in temporary directories created by the Guava API com.google.common.io.Files.createTempDir. By default, on Unix-like systems...

CLEANSTART-2026-WU53412 Security fixes in maven 3.8.6-r1

Package maven version 3.8.6-r1 fixes 4 vulnerabilities: CVE-2023-2976, CVE-2020-8908, CVE-2025-48924, CVE-2025-67030...

CLSA-2026-1778633133 TuxCare security update for com.google.guava (1 CVE)

TuxCare rebuilt 5 com.google.guava packages to address 1 CVE. Fixed in 16.0.1-tuxcare.1...

CLSA-2026-1774398096 TuxCare security update for com.google.guava (1 CVE)

TuxCare rebuilt 5 com.google.guava packages to address 1 CVE. Fixed in 18.0-tuxcare.1...

CLSA-2026-1774484488 TuxCare security update for com.google.guava (1 CVE)

TuxCare rebuilt 4 com.google.guava packages to address 1 CVE. Fixed in 25.1-jre-tuxcare.1...

CLSA-2026-1773015253 TuxCare security update for com.google.guava (2 CVEs)

TuxCare rebuilt 4 com.google.guava packages to address 2 CVEs. Fixed in 27.1-android-tuxcare.1...

CLSA-2025-1765411681 TuxCare security update for com.google.guava (2 CVEs)

TuxCare rebuilt 3 com.google.guava packages to address 2 CVEs. Fixed in 25.1-android-tuxcare.1...

CLSA-2025-1752019363 TuxCare security update for com.google.guava (2 CVEs)

TuxCare rebuilt 5 com.google.guava packages to address 2 CVEs. Fixed in 31.1-jre.tuxcare.1...

CLSA-2024-1733097629 TuxCare security update for com.google.guava (3 CVEs)

TuxCare rebuilt 5 com.google.guava packages to address 3 CVEs. Fixed in 20.0.tuxcare...

CLSA-2024-1726444801 TuxCare security update for com.google.guava (2 CVEs)

TuxCare rebuilt 5 com.google.guava packages to address 2 CVEs. Fixed in 30.1-jre.tuxcare...

Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.

Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details...

ROOT-APP-MAVEN-CVE-2018-10237 CVE-2018-10237 in io.root.com.google.guava:guava - Patched by Root

Root has patched CVE-2018-10237 in the io.root.com.google.guava:guava package for Root:Maven. Multiple fixed versions available...

com.github.jknack:handlebars-guava-cache (0.11.0), com.github.jknack:handlebars-humanize (0.11.0) +4 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (0.11.0)

com.github.jknack:handlebars MAVEN version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-guava-cache 0.11.0 - com.github.jknack:handlebars-humanize 0.11.0 -...

com.github.jknack:handlebars-guava-cache (0.12.0), com.github.jknack:handlebars-humanize (0.12.0) +5 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (0.12.0)

com.github.jknack:handlebars MAVEN version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-guava-cache 0.12.0 - com.github.jknack:handlebars-humanize 0.12.0 -...