Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Google Guava library updated to stop known security risk
published 13 days ago
Summary
The Google Guava Java library and its related modules have been rebuilt with a security fix that resolves one reported weakness. Using the old version could let attackers exploit that weakness, so you should upgrade to version 12.0.1‑tuxcare.1 as soon as possible.
What to do
- Update google com.google.guava:guava to version 12.0.1-tuxcare.1.
- Update google com.google.guava:guava-gwt to version 12.0.1-tuxcare.1.
- Update google com.google.guava:guava-parent to version 12.0.1-tuxcare.1.
- Update google com.google.guava:guava-testlib to version 12.0.1-tuxcare.1.
- Update google com.google.guava:guava-tests to version 12.0.1-tuxcare.1.
- Update com.google.guava:guava to version 12.0.1-tuxcare.1.
- Update com.google.guava:guava-gwt to version 12.0.1-tuxcare.1.
- Update com.google.guava:guava-testlib to version 12.0.1-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | com.google.guava:guava |
>= 12.0.1, < 12.0.1-tuxcare.1 Fix: upgrade to 12.0.1-tuxcare.1
|
|
| TuxCare:Maven | com.google.guava:guava-gwt |
>= 12.0.1, < 12.0.1-tuxcare.1 Fix: upgrade to 12.0.1-tuxcare.1
|
|
| TuxCare:Maven | com.google.guava:guava-parent |
>= 12.0.1, < 12.0.1-tuxcare.1 Fix: upgrade to 12.0.1-tuxcare.1
|
|
| TuxCare:Maven | com.google.guava:guava-testlib |
>= 12.0.1, < 12.0.1-tuxcare.1 Fix: upgrade to 12.0.1-tuxcare.1
|
|
| TuxCare:Maven | com.google.guava:guava-tests |
>= 12.0.1, < 12.0.1-tuxcare.1 Fix: upgrade to 12.0.1-tuxcare.1
|
|
| TuxCare:Maven | – | com.google.guava:guava |
>= 12.0.1, < 12.0.1-tuxcare.1 Fix: upgrade to 12.0.1-tuxcare.1
|
| TuxCare:Maven | – | com.google.guava:guava-gwt |
>= 12.0.1, < 12.0.1-tuxcare.1 Fix: upgrade to 12.0.1-tuxcare.1
|
| TuxCare:Maven | – | com.google.guava:guava-testlib |
>= 12.0.1, < 12.0.1-tuxcare.1 Fix: upgrade to 12.0.1-tuxcare.1
|
Original advisory text
TuxCare security update for com.google.guava:guava (1 CVE)
TuxCare rebuilt com.google.guava:guava to address 1 CVE. Fixed in 12.0.1-tuxcare.1.
Timeline
Published22 Oct 2026
Updated2 Nov 2026
First seen22 Oct 2026
Sources
CLSA-2026-1792657127 · OSV
Track software like this
Free during beta