CVE-2023-2976 - High

[naphelps]

Version: 0.28.0

References: https://nvd.nist.gov/vuln/detail/CVE-2023-2976

[mikehyde]

@lewisjkl May we please have a release with Guava upgraded to the latest version?

[K-Pomian]

Hi @lewisjkl
Is there any chance that this will be fixed?

[kubukoz]

At this stage I think you should consider this library unmaintained.

You can secure yourself against the CVE by adding an explicit dependency for Guava in your own build, but personally I'd recommend moving away from Scalacache to e.g. mules in the near future.