Skip to content

Remove guava override as web-commons-bom no longer conflicts - #148

Open
rnc wants to merge 1 commit into
Commonjava:masterfrom
rnc:BR1
Open

rnc wants to merge 1 commit into
Commonjava:masterfrom
rnc:BR1

Conversation

@rnc

@rnc rnc commented Sep 14, 2026

Copy link
Copy Markdown
Contributor

This requires #147 and will also replace #139

@github-actions

Copy link
Copy Markdown

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output



Identified 72 dependencies

Detected 2 vulnerabilities (0 Critical, 0 High, 1 Medium, 1 Low)

+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| SEVERITY |    LIBRARY     |      ID       |                                             TOP FIX                                             |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| MEDIUM   | guava-19.0.jar | CVE-2023-2976 | Upgrade to version com.google.guava:guava:32.0.1-android,32.0.1-jre                             |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| LOW      | guava-19.0.jar | CVE-2020-8908 | Upgrade to version com.google.guava:guava:32.0.0-android, https://github.com/google/guava.git - |
|          |                |               | v32.0.0                                                                                         |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

path-mapped-pathdb-3.3-SNAPSHOT.pom
|-- path-mapped-pathdb-datastax-3.3-SNAPSHOT.jar
	|-- cassandra-driver-core-3.12.1.jar
		|-- guava-19.0.jar [1 MEDIUM, 1 LOW]
	|-- cassandra-driver-mapping-3.12.1.jar
		|-- guava-19.0.jar [1 MEDIUM, 1 LOW]


No Policy violations were detected

Project 'path-mapped-storage' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=a525e644-1c7f-4265-a1f6-f949714f4deb
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=a6f4fbb9a2544f0c8b6685dec5ba58dee9596f69943146098106ab43cb758822

Mend AI scan succeeded.

Support Token: 08e9707cc87e5467c9d8095283b57ecfa1789400285043
SAST scan output
*no findings*

Full logs and artifacts

@rnc
rnc requested a review from patrikk0123 September 14, 2026 15:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant