Installing testcontainers results in high severity vulnerabilities

[AviVahl]

Expected Behaviour
no vulnerabilities

Actual Behaviour
usage of archiver@7 brings in outdated dependencies that have known security vulnerabilities

Steps to Reproduce

mkdir testcontainers-vulnerabilities
cd testcontainers-vulnerabilities
npm init -y
npm i testcontainers
npm audit

results in 8 high severity vulnerabilities

Environment Information

• Operating System: Fedora 44
• Docker Version: 29.6.2
• Node version: 24.18.0
• Testcontainers version: 12.0.4

Additional Information
archiver@8 is out, but is esm only. consider moving to esm yourself if you want the freedom to use such modern packages.
if only using archiver for tar archives, consider using the npm tar package (by the author of npm)

[AviVahl]

workaround (for npm users):

 "overrides": {
    "testcontainers": {
      "archiver": "^8.0.0"
    }
  }

this works only on newer node versions that support require() on esm modules. tested specifically on node 24.18.0