ai.h2o:h2o-persist-gcs (>=3.36.1.1, <=3.38.0.3), ai.h2o:sparkling-water-core_2.11 (>=3.36.1.1-1-2.2, <=3.38.0.3-1-2.4) +8589 more potentially affected by CVE-2020-8908 via com.google.guava:guava (31.0.1-jre)

com.google.guava:guava MAVEN version 31.0.1-jre is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - ai.h2o:h2o-persist-gcs =3.36.1.1, =3.36.1.1-1-2.2, =3.36.1.1-1-3.0, =3.36.1.1-1-3.1, =3.36.1.1-1-2.2,...