CHK-13433 force netty-codec-dns to 4.2.13.Final via dependency constraint

Copilot · gygrobot · web-flow · commit c6f8981558ea · 2026-05-22T14:23:04.000Z
Agent-Logs-Url: https://github.com/getyourguide/openapi-validation-java/sessions/64cb50d8-eef4-465e-a83a-d80442e78598 Co-authored-by: gygrobot <19344429+gygrobot@users.noreply.github.com>
diff --git a/build.gradle b/build.gradle
@@ -35,6 +35,11 @@ subprojects {
                 useVersion('11.0.21')
                 because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6: Apache Tomcat < 11.0.21 vulnerabilities')
             }
+            if (requested.group == 'io.netty' && requested.name == 'netty-codec-dns'
+                    && requested.version != null && requested.version < '4.2.13.Final') {
+                useVersion('4.2.13.Final')
+                because('GHSA-cm33-6792-r9fm: Netty netty-codec-dns DNS codec input validation bypass')
+            }
         }
     }
 

Original file line number	Diff line number	Diff line change
`@@ -35,6 +35,11 @@ subprojects {`
`35`	`35`	`useVersion('11.0.21')`
`36`	`36`	`because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6: Apache Tomcat < 11.0.21 vulnerabilities')`
`37`	`37`	`}`
	`38`	`+ if (requested.group == 'io.netty' && requested.name == 'netty-codec-dns'`
	`39`	`+ && requested.version != null && requested.version < '4.2.13.Final') {`
	`40`	`+ useVersion('4.2.13.Final')`
	`41`	`+ because('GHSA-cm33-6792-r9fm: Netty netty-codec-dns DNS codec input validation bypass')`
	`42`	`+ }`
`38`	`43`	`}`
`39`	`44`	`}`
`40`	`45`