From a10d8e6456dda47aee0045f335c1d771273d901f Mon Sep 17 00:00:00 2001 From: Susan Hert Date: Thu, 16 Apr 2026 06:45:33 -0700 Subject: [PATCH] Update to netty version 4.2.12.Final to address CVEs (#1340) --- gradle.properties | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gradle.properties b/gradle.properties index e0c423c4ac..8247427360 100644 --- a/gradle.properties +++ b/gradle.properties @@ -266,8 +266,8 @@ modelContextProtocolVersion=1.1.1 mssqlJdbcVersion=13.2.1.jre11 -# Netty - transitive dependency via azure-core-http-netty; force for CVE-2025-67735 -nettyVersion=4.2.8.Final +# Netty - transitive dependency via azure-core-http-netty; force for CVE-2026-33871, CVE-2026-33870 +nettyVersion=4.2.12.Final # Reactor - transitive dependency via azure-core; force for version consistency across modules reactorCoreVersion=3.8.1