From b40c9ebcff4882decda5e7fe4fcf499e3e2e40c0 Mon Sep 17 00:00:00 2001 From: Patrick Boos Date: Tue, 9 Sep 2025 11:59:22 +0200 Subject: [PATCH] [CHK-12508] dependabot alert: Update netty codec version --- build.gradle | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index f999dae..e0c82b1 100644 --- a/build.gradle +++ b/build.gradle @@ -5,6 +5,7 @@ plugins { ext['spring-framework.version'] = '6.2.10' ext['tomcat.version'] = '11.0.10' +ext['netty.version'] = '4.2.6.Final' // Due to security vulnerabilities in 4.125.Final and older apply from: "${rootDir}/gradle/publish-root.gradle" @@ -87,7 +88,7 @@ subprojects { implementation("io.netty:netty-codec-http2:4.2.6.Final") { because("versions below 4.1.124.Final have security vulnerabilities including CVE-2025-55163 - see dependabot #17") } - implementation("io.netty:netty-codec:4.1.125.Final") { + implementation("io.netty:netty-codec:4.2.6.Final") { because("versions below 4.1.125.Final have security vulnerabilities including CVE-2025-58057 - see dependabot #21") } }