Skip to content

Commit 38b9c16

Browse files
authored
[CHK-12508] dependabot alert: Update netty codec version (#259)
1 parent 3ae4974 commit 38b9c16

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

build.gradle

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,7 @@ plugins {
55

66
ext['spring-framework.version'] = '6.2.10'
77
ext['tomcat.version'] = '11.0.10'
8+
ext['netty.version'] = '4.2.6.Final' // Due to security vulnerabilities in 4.125.Final and older
89

910
apply from: "${rootDir}/gradle/publish-root.gradle"
1011

@@ -87,7 +88,7 @@ subprojects {
8788
implementation("io.netty:netty-codec-http2:4.2.6.Final") {
8889
because("versions below 4.1.124.Final have security vulnerabilities including CVE-2025-55163 - see dependabot #17")
8990
}
90-
implementation("io.netty:netty-codec:4.1.125.Final") {
91+
implementation("io.netty:netty-codec:4.2.6.Final") {
9192
because("versions below 4.1.125.Final have security vulnerabilities including CVE-2025-58057 - see dependabot #21")
9293
}
9394
}

0 commit comments

Comments
 (0)