Fixed vulnerabilities with version bumps.
lettuce-core
and netty-common
Fix: Address vulnerabilities in This PR resolves two medium-severity vulnerabilities in the dependencies used by the project.
Details of Vulnerabilities Fixed:
-
io.lettuce:lettuce-core
- Vulnerability: GHSA-q4h9-7rxj-7gx2
- Severity: Medium
- Issue: Netty vulnerability included in Redis lettuce
-
Resolution: Upgraded from
6.3.2.RELEASE
to6.5.1.RELEASE
.
-
io.netty:netty-common
- Vulnerability: CVE-2024-47535
- Severity: Medium
- Issue: Denial of Service attack on Windows apps using Netty
-
Resolution: Upgraded from
4.1.109.Final
to4.1.115
.
Impact:
- Both vulnerabilities are now resolved with the updated dependency versions.
- Ensures improved security and mitigates risks associated with these issues.
Edited by Daniel Scholl (MS]