NES for Google Guava 31.0.x Release Notes

Notes

• This release originates from the open‑source Guava project forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds.

Security Fixes

• CVE-2023-2976: an insecure temporary file creation vulnerability in FileBackedOutputStream allows local users or applications on the same system to access files created in the default Java temporary directory
• CVE-2020-8908: a vulnerability allows a local attacker to exploit insecure default permissions during temporary directory creation, enabling unauthorized access to data stored in those directories when applications use the vulnerable API without additional safeguards.