Skip to content

io.netty:netty-handler:4.1.116.Final is flagged by dependabot #1078

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
ansf opened this issue Feb 20, 2025 · 2 comments
Closed

io.netty:netty-handler:4.1.116.Final is flagged by dependabot #1078

ansf opened this issue Feb 20, 2025 · 2 comments
Labels
needs-triage

Comments

@ansf
Copy link

ansf commented Feb 20, 2025

firebase-admin-java has a dependency to io.netty:netty-handler:4.1.116.Final.
This version of netty-handler is flagged by dependabot, see GHSA-4g8c-wm8x-jfhw

For the fixed version 4.1.118 there is already a pull request: #1074

This might not be a critical issue to firebase-admin-java, but it would be nice if you could publish a release after merging the PR.
@google-oss-bot
Copy link

I couldn't figure out how to label this issue, so I've labeled it for a human to triage. Hang tight.

@jonathanedey
Copy link
Contributor

Thanks for your patience, this is now resolved in v9.5.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
needs-triage
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@ansf @google-oss-bot @jonathanedey