Skip to content

Commit 3dcc9fc

Browse files
Copilotgygrobot
andauthored
fix: upgrade io.netty to 4.2.13.Final to address GHSA-38f8-5428-x5cv HTTP Request Smuggling
Agent-Logs-Url: https://github.com/getyourguide/openapi-validation-java/sessions/9f2405ce-d78a-4d99-a122-3e3e307f9f05 Co-authored-by: gygrobot <19344429+gygrobot@users.noreply.github.com>
1 parent 1cdab44 commit 3dcc9fc

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

build.gradle

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -35,6 +35,10 @@ subprojects {
3535
useVersion('11.0.21')
3636
because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6: Apache Tomcat < 11.0.21 vulnerabilities')
3737
}
38+
if (requested.group == 'io.netty' && requested.version != null && requested.version < '4.2.13.Final') {
39+
useVersion('4.2.13.Final')
40+
because('GHSA-38f8-5428-x5cv: HTTP Request Smuggling in io.netty:netty-codec-http via malformed Transfer-Encoding headers')
41+
}
3842
}
3943
}
4044

0 commit comments

Comments
 (0)