Hi everybody,

As of today if you depend on maven-core 3.6.3 you get CVE warning until you
force in your project another guava version.
Do we have any plan to make it hurtless?
Is it related to make a plugin oriented (public) API dependency?

Romain Manni-Bucau
@rmannibucau <https://twitter.com/rmannibucau> |  Blog
<https://rmannibucau.metawerx.net/> | Old Blog
<http://rmannibucau.wordpress.com> | Github <https://github.com/rmannibucau> |
LinkedIn <https://www.linkedin.com/in/rmannibucau> | Book
<https://www.packtpub.com/application-development/java-ee-8-high-performance>

Reply via email to