Snyk: snowflake-ingest-java org.apache.commons:commons-compress 1.22 | Snyk ID - SNYK-JAVA-ORGAPACHECOMMONS-6254296

Open Beginner friendly

#1,065 opened on Aug 20, 2025 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 2/5
Estimated time: 1-3 hours
Newbie friendliness: 68/100

Issue type: Bug
Clarity: Clearly specified
Activity status: Stale
Tech stack: java
Domain: build-system, security

Research direction

Start with e2e-jar-test/standard/pom.xml and inspect the org.apache.commons:commons-compress 1.22 dependency against CVE-2024-25710. Update the dependency to a non-vulnerable version, then verify that the standard end-to-end JAR test dependency scan or build no longer reports the Snyk finding.

Written by the indexing model from the issue text.

Description

Title: Snyk: snowflake-ingest-java org.apache.commons:commons-compress 1.22
Additional information on Snyk can be found here: https://snyk.io/org/snowflakedb-sca-scanning-public-repo/project/34b0453e-1d9a-450b-9957-893ab6eaede1
Repo: snowflake-ingest-java
CVE: CVE-2024-25710
Package Type: java
Package Name: org.apache.commons:commons-compress
Package Version: 1.22
Snyk ID: SNYK-JAVA-ORGAPACHECOMMONS-6254296
Vulnerability URL: http://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-6254296
Severity: high
Introduced Date: 2025-08-20
Projects with Vulnerability: snowflakedb/snowflake-ingest-java:e2e-jar-test/standard/pom.xml
Target File: e2e-jar-test/standard/pom.xml
JIRA Ticket: https://snowflakecomputing.atlassian.net/browse/SNOW-2280081

Dominant language: Java
Stars: 83
Forks: 70
Avg merge: 1d 7h
Merged PRs (30d): 6

Contributor guide

No contributing guide indexed for this repository

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

[Bug] [Connector-V2] [Http] A streaming Http source never completes a checkpoint: poll_interval_millis is waited out holding the checkpoint lock Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

apache/seatunnel#12411 · Opened Sep 20, 2026
wafv2: TagResource/UntagResource don't enforce the 50-tag limit or key/value length limits Open

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

floci-io/floci#4035 · Opened Sep 20, 2026
[Bug]: 26.3 Missing directional_particles in ConsumeEffect Open

bug needs triage

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

Minestom/Minestom#3375 · Opened Sep 20, 2026
The `grepIn` javadoc example never matches real XMIR, so a user who copies it silently gets no optimization Open

Difficulty 1/5 Under an hour Newbie friendliness 94/100

objectionary/hone-maven-plugin#1061 · Opened Sep 20, 2026
Store the original domain event in the Namastack outbox Open

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

spring-projects/spring-modulith#1895 · Opened Sep 20, 2026

More Java issues