From edfdc0c435d48f3791e76e6341875260397609ed Mon Sep 17 00:00:00 2001
From: sophia chen <sophia.chen@thetradedesk.com>
Date: Wed, 28 Oct 2026 16:04:54 +1100
Subject: [PATCH] UID2-8215: upgrade guava to 33.7.2-jre (CVE-2026-102554)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
---
 pom.xml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pom.xml b/pom.xml
index e3d41171..dc42190a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -112,6 +112,12 @@
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
+            <!-- Overrides the guava version managed by libraries-bom. -->
+            <dependency>
+                <groupId>com.google.guava</groupId>
+                <artifactId>guava</artifactId>
+                <version>33.7.2-jre</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>