Google Guava

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-1025544.0 – < 33.7.2Denial of Service via Eager Array Allocation During Deserialization in GuavaHIGH 8.20.4 %
CVE-2023-29761.0 – < 32.0.0Use of temporary directory for file creation in `FileBackedOutputStream` in GuavaHIGH 7.10.2 %