The Netty project and Plexus Utils are vulnerable.

[sohamdatta]

The Netty project and Plexus Utils are vulnerable. Please update the version.

[cescoffier]

We are aware of these CVEs; the fix has already been applied, and the releases should have shipped.

Note that for Plexus, we are not using the affected API.