Added fixed version of netty http2

germanosin · germanosin · commit aab044d1e20c · 2025-08-14T15:29:43.000+03:00
diff --git a/api/build.gradle b/api/build.gradle
@@ -69,6 +69,7 @@ dependencies {
     implementation libs.apache.commons.compress
     implementation libs.okhttp3.logging.intercepter
     implementation libs.reactor.netty.http
+    implementation libs.netty.codec.http2
     // CVE Fixes End
 
     implementation libs.modelcontextprotocol.spring.webflux
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
@@ -153,3 +153,4 @@ snappy = {module = 'org.xerial.snappy:snappy-java', version = '1.1.10.7'}
 
 # CVE fixes
 reactor-netty-http = {module = 'io.projectreactor.netty:reactor-netty-http', version = '1.2.8'}
+netty-codec-http2 = {module = 'io.netty:netty-codec-http2', version = '4.1.124'}

Original file line number	Diff line number	Diff line change
`@@ -153,3 +153,4 @@ snappy = {module = 'org.xerial.snappy:snappy-java', version = '1.1.10.7'}`
`153`	`153`
`154`	`154`	`# CVE fixes`
`155`	`155`	`reactor-netty-http = {module = 'io.projectreactor.netty:reactor-netty-http', version = '1.2.8'}`
	`156`	`+netty-codec-http2 = {module = 'io.netty:netty-codec-http2', version = '4.1.124'}`