From b27275c4fce28293ec7075953056eb616b404efd Mon Sep 17 00:00:00 2001
From: Keegan Witt <keeganwitt@gmail.com>
Date: Tue, 23 May 2023 18:04:53 -0400
Subject: [PATCH] Fix Guava CVEs

---
 pom.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/pom.xml b/pom.xml
index 2aa7cda0..31af3904 100644
--- a/pom.xml
+++ b/pom.xml
@@ -77,6 +77,13 @@
       <version>3.5.1</version>
       <scope>runtime</scope>
     </dependency>
+    <dependency>
+      <!-- fix CVE-2018010237 and CVE-2020-8908 coming from org.apache.maven:maven-core -->
+      <groupId>com.google.guava</groupId>
+      <artifactId>guava</artifactId>
+      <version>30.0-jre</version>
+      <scope>runtime</scope>
+    </dependency>
     <dependency>
       <!-- this is to support use of Groovysh (Groovy jars don't include) -->
       <groupId>org.fusesource.jansi</groupId>