[Bug]: Transitive dependency (org.apache.commons:commons-compress) with known vulnerability

[LawrenceMouarkach]

Module

Core

Testcontainers version

1.21.3

Using the latest Testcontainers version?

Yes

Host OS

n/a

Host Arch

n/a

Docker version

n/a

What happened?

latest testcontainers version brings in version of apache-commons-compress with known infinite loop vulnerability:

https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-6254296

Relevant log output

Additional Information

No response

[eddumelendez]

Release is pending

[nneto]

Couldn't find in release notes yet. Also, how much time does it take to the latest version be available on maven repositories?