Skip to content

Commit 87323f5

Browse files
committed
fix vulnerabilities and upgrade backend dependency packages
1 parent 5a31e3f commit 87323f5

1 file changed

Lines changed: 13 additions & 4 deletions

File tree

build.gradle

Lines changed: 13 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -231,13 +231,22 @@ project(':dgrv4_Gateway_serv'){
231231

232232
// 添加對 Netty 的非遮蔽(non-shaded)依賴,以便 TLS 相關功能
233233
implementation ('io.grpc:grpc-netty:1.61.0'){
234-
// CVE-2025-55163
234+
// CVE-2025-55163
235235
exclude group:'io.netty', module:'netty-codec-http2'
236+
//CVE-2025-58056
237+
exclude group:'io.netty', module:'netty-codec-http'
238+
//CVE-2025-58057
239+
exclude group:'io.netty', module:'netty-codec'
236240
}
237241
// Correct the above exclusions, CVE-2025-55163
238-
implementation 'io.netty:netty-codec-http2:4.1.124.Final'
239-
240-
242+
implementation ('io.netty:netty-codec-http2:4.1.124.Final') {
243+
//CVE-2025-58057
244+
exclude group:'io.netty', module:'netty-codec'
245+
}
246+
// Correct the above exclusions, CVE-2025-58056
247+
implementation 'io.netty:netty-codec-http:4.1.125.Final'
248+
// Correct the above exclusions, CVE-2025-58057
249+
implementation 'io.netty:netty-codec:4.1.125.Final'
241250

242251
implementation 'io.netty:netty-tcnative-boringssl-static:2.0.61.Final'
243252
}

0 commit comments

Comments
 (0)