testImplementation 'org.testcontainers:rabbitmq:1.20.4' 2 vulnerabilities found in dependency

 

"2 vulnerabilities found in dependency:
GHSA-4g9r-vxhx-9pgx
8.1
Transitive Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file
GHSA-4265-ccf5-phj5
5.5
Transitive Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file"

org.testcontainers:rabbitmq:1.20.4 의존성 추가해줬더니 이와 같은 경고 메시지가 발생했습니다.

 

	testImplementation 'org.testcontainers:rabbitmq:1.20.4'
	testImplementation 'org.apache.commons:commons-compress:1.26.0'

보안 취약점 없는 버전('org.apache.commons:commons-compress:1.26.0')을 명시해줌으로써 경고 없앴읍니다.