fix CVE-2025-55163, CVE-2025-48924

Signed-off-by: Brian Flores <[email protected]>

Author: brianf-aws

ml-algorithms/build.gradle

@@ -88,7 +88,18 @@ dependencies {
     }
     implementation('net.minidev:json-smart:2.5.2')
     implementation group: 'org.json', name: 'json', version: '20231013'
-    implementation group: 'software.amazon.awssdk', name: 'netty-nio-client', version: "2.30.18"
+    implementation (group: 'software.amazon.awssdk', name: 'netty-nio-client', version: "2.30.18")  {
+        exclude group: "io.netty"
+    }
+    implementation 'io.netty:netty-codec-http2:4.2.4.Final'
+    implementation 'io.netty:netty-codec-http:4.2.4.Final'
+    implementation 'io.netty:netty-common:4.2.4.Final'
+    implementation 'io.netty:netty-buffer:4.2.4.Final'
+    implementation 'io.netty:netty-transport:4.2.4.Final'
+    implementation 'io.netty:netty-handler:4.2.4.Final'
+    implementation 'io.netty:netty-resolver:4.2.4.Final'
+    implementation 'io.netty:netty-codec:4.2.4.Final'
+    implementation 'io.netty:netty-transport-classes-epoll:4.2.4.Final'
     testImplementation("com.fasterxml.jackson.core:jackson-annotations:${versions.jackson}")
     testImplementation("com.fasterxml.jackson.core:jackson-databind:${versions.jackson_databind}")
     testImplementation group: 'com.networknt' , name: 'json-schema-validator', version: '1.4.0'
@@ -103,6 +114,7 @@ configurations.all {
     resolutionStrategy.force 'org.apache.commons:commons-compress:1.26.0'
     resolutionStrategy.force 'software.amazon.awssdk:bom:2.30.18'
     resolutionStrategy.force 'commons-beanutils:commons-beanutils:1.11.0'
+    resolutionStrategy.force 'org.apache.commons:commons-lang3:3.18.0'
 }
 
 jacocoTestReport {