ZachChuba

[Bug]: Testcontainers uses outdated versions of Snakeyaml & Jackson, which have critical vulnerabilities, flagging testcontainers on security scanning tools

23

### Module Core ### Testcontainers version 1.20.1 ### Using the latest Testcontainers version? Yes ### Host OS MacOS ### Host Arch ARM ### Docker version ```shell Client: Version: 26.1.4 API...

High Severity Security Vulnerability: sonatype-2021-0789

4

shaded-asynchttpclient-2.2.9.jarplay/shaded/ahc/io/netty/handler/codec/compression/Lz4FrameEncoder.class[4.1.0.Beta2 , 4.1.66.Final) has a high vulnerability related to buffer overflow. The root cause is an out of date netty transitive dependency. Please upgrade the netty-codec version to one that...

Upgrade jackson to 2.19 and snakeyaml to 2.14

4

Code hygene and clearing falsely flagged CVEs Upgrade jackson and snakeyaml to the latest version. Aside from providing code hygene, these two dependencies are flagged by FOSS scanning tools as...