{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "google guava: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/google--guava/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/google--guava/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102554/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102554/",
   "title": "CVE-2026-102554 · google guava · disclosed",
   "content_text": "Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances, Guava eagerly allocates an array based on a caller-specified size parameter without throttling, permitting memory exhaustion from crafted serialization streams.",
   "date_published": "2026-10-09T15:07:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102554/fixed/opensuse-leap-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102554/",
   "title": "CVE-2026-102554 · google guava · fixed in openSUSE Leap 16.0 (guava 33.7.2-160000.1.1)",
   "content_text": "Fixed versions: guava 33.7.2-160000.1.1.",
   "date_published": "2026-10-09T15:07:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102554/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102554/",
   "title": "CVE-2026-102554 · google guava · fixed in openSUSE Tumbleweed (guava 33.7.2-1.1)",
   "content_text": "Fixed versions: guava 33.7.2-1.1.",
   "date_published": "2026-10-09T15:07:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102554/fixed/suse-linux-enterprise-server-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102554/",
   "title": "CVE-2026-102554 · google guava · fixed in SUSE Linux Enterprise Server 16.0 (guava 33.7.2-160000.1.1)",
   "content_text": "Fixed versions: guava 33.7.2-160000.1.1.",
   "date_published": "2026-10-09T15:07:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102554/fixed/suse-linux-enterprise-server-for-sap-applications-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102554/",
   "title": "CVE-2026-102554 · google guava · fixed in SUSE Linux Enterprise Server for SAP applications 16.0 (guava 33.7.2-160000.1.1)",
   "content_text": "Fixed versions: guava 33.7.2-160000.1.1.",
   "date_published": "2026-10-09T15:07:16Z"
  }
 ]
}