CVE-2025-24970 high vul fix

provider/notification-ibm/pom.xml

@@ -55,6 +55,14 @@
         <groupId>io.undertow</groupId>
         <artifactId>undertow-websockets-jsr</artifactId>
       </dependency>
+      <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-bom</artifactId>
+            <version>4.1.118.Final</version>
+            <type>pom</type>
+            <scope>import</scope>
+      </dependency>
+
     </dependencies>
   </dependencyManagement>
 
@@ -68,6 +76,14 @@
                     <groupId>commons-logging</groupId>
                     <artifactId>commons-logging</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>io.netty</groupId>
+                    <artifactId>netty-handler</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>commons-io</groupId>
+                    <artifactId>commons-io</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
         <dependency>
@@ -84,7 +100,6 @@
             <groupId>org.opengroup.osdu</groupId>
             <artifactId>notification-core</artifactId>
             <version>0.28.0-SNAPSHOT</version>
-
         </dependency>
         <dependency>
     		<groupId>org.springframework.security</groupId>
@@ -94,12 +109,11 @@
 			<groupId>org.springframework.security</groupId>
 			<artifactId>spring-security-config</artifactId>
 		</dependency>
-
-		<dependency>
-			<groupId>io.netty</groupId>
-            <artifactId>netty-codec</artifactId>
-            <version>4.1.68.Final</version>
-		</dependency>
+        <dependency>
+            <groupId>commons-io</groupId>
+            <artifactId>commons-io</artifactId>
+            <version>2.14.0</version>
+        </dependency>
         <!-- unit test dependencies -->
         <dependency>
             <groupId>org.powermock</groupId>