Skip to content

UID2-7278: upgrade Netty to 4.1.135.Final (CVE-2026-44249/45416/45674/47691)#41

Open
cYKatherine wants to merge 1 commit into
mainfrom
kchen-UID2-7278-netty-4.1.135
Open

UID2-7278: upgrade Netty to 4.1.135.Final (CVE-2026-44249/45416/45674/47691)#41
cYKatherine wants to merge 1 commit into
mainfrom
kchen-UID2-7278-netty-4.1.135

Conversation

@cYKatherine

Copy link
Copy Markdown
Contributor

Summary

Bumps all Netty module pins in dependencyManagement from 4.1.133.Final4.1.135.Final (netty-codec-http, netty-codec-http2, netty-bom). Fixes 4 HIGH CVEs:

Jira

UID2-7278

Test plan

  • CI vulnerability scan passes
  • Unit tests pass

…/47691)

Update all Netty module pins in dependencyManagement from 4.1.133.Final to
4.1.135.Final (netty-codec-http, netty-codec-http2, netty-bom).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant