From becc9c4d4ee42f30ec6bcc6d1b099c0a97a50002 Mon Sep 17 00:00:00 2001
From: Sylwester Lachiewicz <slachiewicz@apache.org>
Date: Sun, 5 May 2024 11:40:43 +0200
Subject: [PATCH] Upgrade Guava to 32.0.1-jre

---
 pom.xml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/pom.xml b/pom.xml
index 9da83b1..b09a520 100644
--- a/pom.xml
+++ b/pom.xml
@@ -34,6 +34,17 @@
     <project.build.outputTimestamp>2023-12-14T13:10:41Z</project.build.outputTimestamp>
   </properties>
 
+  <dependencyManagement>
+    <dependencies>
+      <dependency>
+        <groupId>com.google.guava</groupId>
+        <artifactId>guava</artifactId>
+        <!-- overwrite due to CVE-2023-2976 in Guice transitive dependencies -->
+        <version>32.0.1-jre</version>
+      </dependency>
+    </dependencies>
+  </dependencyManagement>
+
   <dependencies>
     <dependency>
       <groupId>org.eclipse.sisu</groupId>