P5 Verified

CVE-2023-2976 in com.google.guava:guava - Patched by Root

CVE-2023-2976 affects com.google.guava:guava. EPSS 0.00248 (percentile 0.1458), scored 2026-10-03. Fixed version: 28.2-jre-aikido.3. Fixed version: 28.2-jre-aikido.4. Fixed version: 31.1-android-aikido.1. Fixed version: 21.0-aikido.1. Fixed version: 30.1.1-jre-aikido.1. Fixed version: 21.0-aikido.2. Fixed version: 30.1-jre-aikido.1. Fixed version: 31.0.1-jre-aikido.1. Fixed version: 30.1.1-jre-aikido.2. Fixed version: 31.1-android-aikido.2. Fixed version: 31.0.1-jre-aikido.2. Fixed version: 30.1-jre-aikido.2. Fixed version: 28.2-jre-root.io.1. Fixed version: 28.2-jre-root.io.2.

Summary source: template

CVE / CWE

CVE-2023-2976 /

Vendor / product

Unavailable / com.google.guava:guava

Severity

0.1

CVSS

Unavailable · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · osv

EPSS

0.00248 · percentile 0.1458 · 2026-10-03

KEV

no · added unavailable · due unavailable · ransomware use unavailable

Exploit signals

Signal evidence

Affected products

• com.google.guava:guava · Fixed version: 28.2-jre-aikido.3
• com.google.guava:guava · Fixed version: 28.2-jre-aikido.4
• com.google.guava:guava · Fixed version: 31.1-android-aikido.1
• com.google.guava:guava · Fixed version: 21.0-aikido.1
• com.google.guava:guava · Fixed version: 30.1.1-jre-aikido.1
• com.google.guava:guava · Fixed version: 21.0-aikido.2
• com.google.guava:guava · Fixed version: 30.1-jre-aikido.1
• com.google.guava:guava · Fixed version: 31.0.1-jre-aikido.1
• com.google.guava:guava · Fixed version: 30.1.1-jre-aikido.2
• com.google.guava:guava · Fixed version: 31.1-android-aikido.2
• com.google.guava:guava · Fixed version: 31.0.1-jre-aikido.2
• com.google.guava:guava · Fixed version: 30.1-jre-aikido.2
• io.root.com.google.guava:guava · Fixed version: 28.2-jre-root.io.1
• io.root.com.google.guava:guava · Fixed version: 28.2-jre-root.io.2
• io.root.com.google.guava:guava · Fixed version: 28.2-jre-root.io.3
• io.root.com.google.guava:guava · Fixed version: 28.2-jre-root.io.4
• io.root.com.google.guava:guava · Fixed version: 31.1-android-root.io.1
• io.root.com.google.guava:guava · Fixed version: 21.0-root.io.1
• io.root.com.google.guava:guava · Fixed version: 30.1.1-jre-root.io.1
• io.root.com.google.guava:guava · Fixed version: 21.0-root.io.2
• io.root.com.google.guava:guava · Fixed version: 30.1-jre-root.io.1
• io.root.com.google.guava:guava · Fixed version: 31.0.1-jre-root.io.1
• io.root.com.google.guava:guava · Fixed version: 30.1.1-jre-root.io.2
• io.root.com.google.guava:guava · Fixed version: 31.1-android-root.io.2
• io.root.com.google.guava:guava · Fixed version: 31.0.1-jre-root.io.2
• io.root.com.google.guava:guava · Fixed version: 30.1-jre-root.io.2

Provenance

• OSV.dev · Source record · observed 2026-10-04 09:27:46.047644+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2023-2976.html