Snyk: snowflake-ingest-java io.netty:netty-common 4.1.110.Final | Snyk ID - SNYK-JAVA-IONETTY-8707740

Open

#990 opened on Apr 11, 2025 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 2/5
Estimated time: 1-3 hours
Newbie friendliness: 35/100

Issue type: Bug
Clarity: Mostly clear
Activity status: Stale
Tech stack: java
Domain: security

Research direction

Start with e2e-jar-test/fips/pom.xml and review the io.netty:netty-common dependency at 4.1.110.Final. Check the linked Snyk vulnerability details and the referenced JIRA ticket to determine the required remediation. Done means the CVE is addressed for this target file and the relevant build or security check passes.

Written by the indexing model from the issue text.

Description

Title: Snyk: snowflake-ingest-java io.netty:netty-common 4.1.110.Final
Additional information on Snyk can be found here: https://snyk.io/org/snowflakedb-sca-scanning-public-repo/project/217bfa6d-8f40-4288-9bcb-c8c482924cd5
Repo: snowflake-ingest-java
CVE: CVE-2025-25193
Package Type: java
Package Name: io.netty:netty-common
Package Version: 4.1.110.Final
Snyk ID: SNYK-JAVA-IONETTY-8707740
Vulnerability URL: http://security.snyk.io/vuln/SNYK-JAVA-IONETTY-8707740
Severity: medium
Introduced Date: 2025-04-10
Projects with Vulnerability: snowflakedb/snowflake-ingest-java:e2e-jar-test/fips/pom.xml
Target File: e2e-jar-test/fips/pom.xml
JIRA Ticket: https://snowflakecomputing.atlassian.net/browse/SNOW-2036536

Dominant language: Java
Stars: 83
Forks: 70
Avg merge: 1d 7h
Merged PRs (30d): 6

Contributor guide

No contributing guide indexed for this repository

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

[Bug] [Connector-V2] [Http] A streaming Http source never completes a checkpoint: poll_interval_millis is waited out holding the checkpoint lock Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

apache/seatunnel#12411 · Opened Sep 20, 2026
wafv2: TagResource/UntagResource don't enforce the 50-tag limit or key/value length limits Open

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

floci-io/floci#4035 · Opened Sep 20, 2026
[Bug]: 26.3 Missing directional_particles in ConsumeEffect Open

bug needs triage

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

Minestom/Minestom#3375 · Opened Sep 20, 2026
The `grepIn` javadoc example never matches real XMIR, so a user who copies it silently gets no optimization Open

Difficulty 1/5 Under an hour Newbie friendliness 94/100

objectionary/hone-maven-plugin#1061 · Opened Sep 20, 2026
Store the original domain event in the Namastack outbox Open

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

spring-projects/spring-modulith#1895 · Opened Sep 20, 2026

More Java issues