Snyk: snowflake-ingest-java io.netty:netty-common 4.1.110.Final | Snyk ID - SNYK-JAVA-IONETTY-8367012

Open

#981 opened on Apr 11, 2025 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 2/5
Estimated time: 1-3 hours
Newbie friendliness: 48/100

Issue type: Bug
Clarity: Mostly clear
Activity status: Stale
Tech stack: java
Domain: build-system, security

Research direction

Start with e2e-jar-test/fips/pom.xml and review the io.netty:netty-common dependency at version 4.1.110.Final, then read the linked CVE-2024-47535 details. Done means the FIPS end-to-end JAR configuration no longer uses the vulnerable dependency version and its relevant build checks pass.

Written by the indexing model from the issue text.

Description

Title: Snyk: snowflake-ingest-java io.netty:netty-common 4.1.110.Final
Additional information on Snyk can be found here: https://snyk.io/org/snowflakedb-sca-scanning-public-repo/project/217bfa6d-8f40-4288-9bcb-c8c482924cd5
Repo: snowflake-ingest-java
CVE: CVE-2024-47535
Package Type: java
Package Name: io.netty:netty-common
Package Version: 4.1.110.Final
Snyk ID: SNYK-JAVA-IONETTY-8367012
Vulnerability URL: http://security.snyk.io/vuln/SNYK-JAVA-IONETTY-8367012
Severity: medium
Introduced Date: 2025-04-10
Projects with Vulnerability: snowflakedb/snowflake-ingest-java:e2e-jar-test/fips/pom.xml
Target File: e2e-jar-test/fips/pom.xml
JIRA Ticket: https://snowflakecomputing.atlassian.net/browse/SNOW-2036536

Dominant language: Java
Stars: 83
Forks: 70
Avg merge: 1d 7h
Merged PRs (30d): 6

Contributor guide

No contributing guide indexed for this repository

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

[Bug] [Connector-V2] [Http] A streaming Http source never completes a checkpoint: poll_interval_millis is waited out holding the checkpoint lock Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

apache/seatunnel#12411 · Opened Sep 20, 2026
wafv2: TagResource/UntagResource don't enforce the 50-tag limit or key/value length limits Open

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

floci-io/floci#4035 · Opened Sep 20, 2026
[Bug]: 26.3 Missing directional_particles in ConsumeEffect Open

bug needs triage

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

Minestom/Minestom#3375 · Opened Sep 20, 2026
The `grepIn` javadoc example never matches real XMIR, so a user who copies it silently gets no optimization Open

Difficulty 1/5 Under an hour Newbie friendliness 94/100

objectionary/hone-maven-plugin#1061 · Opened Sep 20, 2026
Store the original domain event in the Namastack outbox Open

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

spring-projects/spring-modulith#1895 · Opened Sep 20, 2026

More Java issues