CVE-2026-118042

Google Guava from 13.0 through 33.7.2 is vulnerable to hash flooding in HashBiMap and in the per-key value sets of LinkedHashMultimap. These collections use chained hash tables with no fallback when a bucket grows long, so inserting keys or values that share a hashCode makes construction quadrati...