Using GWT 2.10.1 (or 2.11.0 has the same issue).

The current version of htmlunit has a security vulnerability. Since it is a unit test it shouldn't be critical however tools report it so there is always a discussion with the security guys which could be avoided.

Note that there was a switch in the groupid (old , new . Changes can be found here)

We should upgrade to at least version 3.9.0 or higher:

<dependency>
    <groupId>org.htmlunit</groupId>
    <artifactId>htmlunit</artifactId>
    <version>4.1.0</version>
</dependency>

Please excuse my limited knowledge in GWT - but is htmlunit necessary during runtime?