diff --git a/build.gradle b/build.gradle index 8edee32..681ad43 100644 --- a/build.gradle +++ b/build.gradle @@ -35,6 +35,11 @@ subprojects { useVersion('11.0.21') because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6: Apache Tomcat < 11.0.21 vulnerabilities') } + if (requested.group == 'io.netty' && requested.name == 'netty-handler-proxy' + && requested.version != null && requested.version < '4.2.13.Final') { + useVersion('4.2.13.Final') + because('GHSA-45q3-82m4-75jr: HTTP Header Injection vulnerability in netty-handler-proxy < 4.2.13.Final') + } } }