René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Dependency version updates","articleBody":"Even though this is about a Guava vulnerability, because graphql-java shades the Guava library, vulnerabilities-scanning software is flagging graphql-java as also being vulnerable.\r\n\r\nGraphql-java seems to be using few modules of guava the fix for vulnerability in [release 20.4](https://github.com/graphql-java/graphql-java/releases/tag/v20.4) the 20.4 version uses 32.0.0 version of guava which still contains the vulnerablity[ CVE-2023-2976](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2976)\r\n\r\nI am creating this ticket to ask if you could release a patch version including this update and to use [guava versions](https://mvnrepository.com/artifact/com.google.guava/guava) **\u003e=32.0.1** to remove the vulnerablity\r\n\r\nThe Guava vulnerability reported  has been fixed in Guava version \u003e=32.0.1.\r\n","author":{"url":"https://github.com/chandakakshat","@type":"Person","name":"chandakakshat"},"datePublished":"2023-07-04T07:49:17.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":19},"url":"https://github.com/3263/graphql-java/issues/3263"}