CGA-q6xm-fh5w-65wh

This vulnerability relates to guava, which is a transitive dependency. It was fixed in v32.0.0. However, the vulnerability is incorrectly flagged as a finding in v32.0.0. See affected and patched versions: https://github.com/advisories/GHSA-7g45-4rm6-3mm3 Release notes: https://github.com/google/guava/releases/tag/v32.0.0