Repository metrics

Stars

33,728 stars (33,728 stars)

PR merge metrics

No merged PRs in 30d (No merged PRs in 30d)

Description

        <dependency>
            <groupId>com.alibaba</groupId>
            <artifactId>easyexcel</artifactId>
        </dependency>

Contributor guide

Research direction

Identify the vulnerable transitive dependency (commons compress) and update it to a patched version that addresses CVE 2024-26308 and CVE 2024-25710.

Tech stack

java

Domain

backend

Issue type

Security

DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.

2

Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.

1-3 hours

Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.

Active

ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.

Clear

Prerequisites

JavaMaven

Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.

85