From 3b9b2038bdfc52bf26fbeb217095ba95a2df784d Mon Sep 17 00:00:00 2001 From: catarina Date: Wed, 27 May 2026 18:41:46 +0200 Subject: [PATCH] Remove requested name for netty --- build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index 08d60c0..d391f6a 100644 --- a/build.gradle +++ b/build.gradle @@ -35,7 +35,7 @@ subprojects { useVersion('11.0.22') because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6 / GHSA-gx5v-xp9w-j4cg: Apache Tomcat < 11.0.22 vulnerabilities') } - if (requested.group == 'io.netty' && requested.name in ['netty-codec-http', 'netty-codec-http2', 'netty-codec-http3'] + if (requested.group == 'io.netty' && requested.version != null && requested.version < '4.2.13.Final') { useVersion('4.2.13.Final') because('GHSA-38f8-5428-x5cv: HTTP Request Smuggling in io.netty:netty-codec-http via malformed Transfer-Encoding headers')