Update overrides for vulnerable Minecraft dependencies

Alexander01998 · Alexander01998 · commit 538c40232c88 · 2025-09-05T12:28:10.000+02:00
diff --git a/build.gradle b/build.gradle
@@ -37,6 +37,8 @@ configurations.all {
 		force "org.apache.commons:commons-lang3:3.18.0"
 		// v9.40, used by Minecraft 1.21.4 - 1.21.8, is vulnerable to CVE-2025-53864
 		force "com.nimbusds:nimbus-jose-jwt:10.0.2"
+		// v4.1.118.Final, used by Minecraft 1.21.5 - 1.21.8, is vulnerable to CVE-2025-58057
+		force "io.netty:netty-codec:4.1.125.Final"
 	}
 }
 

Original file line number	Diff line number	Diff line change
`@@ -37,6 +37,8 @@ configurations.all {`
`37`	`37`	`force "org.apache.commons:commons-lang3:3.18.0"`
`38`	`38`	`// v9.40, used by Minecraft 1.21.4 - 1.21.8, is vulnerable to CVE-2025-53864`
`39`	`39`	`force "com.nimbusds:nimbus-jose-jwt:10.0.2"`
	`40`	`+ // v4.1.118.Final, used by Minecraft 1.21.5 - 1.21.8, is vulnerable to CVE-2025-58057`
	`41`	`+ force "io.netty:netty-codec:4.1.125.Final"`
`40`	`42`	`}`
`41`	`43`	`}`
`42`	`44`