Skip to content

[Bug]: Transitive dependency (org.apache.commons:commons-compress) with known vulnerability #10813

New issue
New issue
Closed as duplicate
Closed as duplicate
[Bug]: Transitive dependency (org.apache.commons:commons-compress) with known vulnerability#10813
Labels
type/bug

Description

@LawrenceMouarkach
LawrenceMouarkach
opened on Sep 30, 2025

Module

Core

Testcontainers version

1.21.3

Using the latest Testcontainers version?

Yes

Host OS

n/a

Host Arch

n/a

Docker version

n/a

What happened?

latest testcontainers version brings in version of apache-commons-compress with known infinite loop vulnerability:

https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-6254296

Relevant log output



Additional Information


No response
Activity
  1. LawrenceMouarkach
    added 
    type/bug
     on Sep 30, 2025
  2. eddumelendez commented on Oct 8, 2025 
    @eddumelendez
    eddumelendez
    on Oct 8, 2025
    Member
    Release is pending
  3. eddumelendez
    closed this as  a duplicateof [Bug]: Vulnerable dependency commons-compress 1.24.0 #8338 on Oct 8, 2025
  4. nneto commented on Nov 10, 2025 
    @nneto
    nneto
    on Nov 10, 2025
    Couldn't find in release notes yet. Also, how much time does it take to the latest version be available on maven repositories?
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Metadata
Metadata
Assignees
No one assigned
    Labels
    type/bug
    Type
    No type
    Projects
    No projects
      Milestone
      No milestone
      Relationships
      None yet
      Development
      No branches or pull requests
      Issue actions