[🐛 Bug]: Request to bump up Netty to 4.2.5.Final due to vulnerabilities

[amardeep2006]

Description

I did a dependency scan and selenium server jar has been flagged for Netty Version having some vulnerabilities.

https://nvd.nist.gov/vuln/detail/CVE-2025-58056
https://nvd.nist.gov/vuln/detail/CVE-2025-58057

Vulnerability description states that we must upgrade to versions 4.1.125.Final OR 4.2.5.Final. '
Since we moved to 4.2.x train recently via #16194 , the desired version for us in 4.2.5.Final should be simple upgrade.

Reproducible Code

NA

[selenium-ci]

@amardeep2006, thank you for creating this issue. We will troubleshoot it as soon as we can.

Selenium Triage Team: remember to follow the Triage Guide

[cgoldberg]

Dependencies get bumped for each release, so this will be included in Selenium 4.36.

If you are building from source yourself, you can update dependencies with: ./go java:update.

[github-actions]

This issue has been automatically locked since there has not been any recent activity since it was closed. Please open a new issue for related bugs.