[Bug]: Upgrade Dependencies to resolve "CVE-2024-25710" and "CVE-2024-26308"

[fsmherrm]

Module

Core

Testcontainers version

1.20.6

Using the latest Testcontainers version?

Yes

Host OS

Unix

Host Arch

x64

Docker version

n/a

What happened?

Hello Team,

I would like to bring to your attention that the latest version 1.20.6 has been identified to have two vulnerabilities, specifically "CVE-2024-25710" and "CVE-2024-26308." These vulnerabilities prevent us from utilizing testcontainers internally.

To ensure our systems remain secure and operational, I kindly request that we prioritize remediating these findings by upgrading to newer dependency versions as soon as possible.

Thank you for your attention to this important matter.

Best regards,
Marc

Relevant log output

Additional Information

No response

[fsmherrm]

My assumption is that it should be resolved by just updating

testcontainers-java/core/build.gradle

Line 76 in 73e0637

api 'org.apache.commons:commons-compress:1.24.0'

with a version >= 1.26.0