CVE-2024-47535

[eidherjulian61]

Vulnerability found in io.netty:netty-common version 4.1.92.Final. Fixed in 4.1.115.Final.

How to fix this: Change awssdk version to 2.29.12

implementation(platform('software.amazon.awssdk:bom:2.29.12'))

How to override this:

1. Add exclusion to aws-msk-iam-auth dependency:

    <exclusion>
          <artifactId>netty-common</artifactId>
          <groupId>io.netty</groupId>
      </exclusion>

2. Add dependency:

    <dependency>
        <groupId>io.netty</groupId>
        <artifactId>netty-common</artifactId>
        <version>4.1.115.Final</version>
    </dependency>

[azbw2]

software.amazon.awssdk:bom has been bumped in the latest release 2.3.0.

[github-actions]

This issue is now closed. Comments on closed issues are hard for our team to see.
If you need more assistance, please open a new issue that references this one.