Security Upgrade Request – Netty Version (4.4 & 5.x Branches)

[shuirna]

Hi Maintainers,

We need help upgrading the current Netty version in both the 4.4 and 5.x branches due to a known vulnerability.

---

🔐 Vulnerability Details

Vulnerability	Severity	CVSS3	Package	Current Version	Fixed in Version
CVE-2025-67735	Medium	NVD: 6.5	io.netty:netty-codec-http	4.1.127.Final	4.1.129.Final, 4.2.8.Final
CVE-2025-67735	Medium	NVD: 6.5	io.netty:netty-codec-http	4.2.7.Final	4.1.129.Final, 4.2.8.Final

---

📦 Current Netty Versions in Repository

4.4 Branch

<netty-bom.version>4.1.127.Final</netty-bom.version>

5.x Branch

<netty-bom.version>4.2.6.Final</netty-bom.version>

Thanks

[shuirna]

no response... close

[shuirna]

4.4 fixed, thanks 👍