File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -231,13 +231,22 @@ project(':dgrv4_Gateway_serv'){
231231
232232 // 添加對 Netty 的非遮蔽(non-shaded)依賴,以便 TLS 相關功能
233233 implementation (' io.grpc:grpc-netty:1.61.0' ){
234- // CVE-2025-55163
234+ // CVE-2025-55163
235235 exclude group :' io.netty' , module :' netty-codec-http2'
236+ // CVE-2025-58056
237+ exclude group :' io.netty' , module :' netty-codec-http'
238+ // CVE-2025-58057
239+ exclude group :' io.netty' , module :' netty-codec'
236240 }
237241 // Correct the above exclusions, CVE-2025-55163
238- implementation ' io.netty:netty-codec-http2:4.1.124.Final'
239-
240-
242+ implementation (' io.netty:netty-codec-http2:4.1.124.Final' ) {
243+ // CVE-2025-58057
244+ exclude group :' io.netty' , module :' netty-codec'
245+ }
246+ // Correct the above exclusions, CVE-2025-58056
247+ implementation ' io.netty:netty-codec-http:4.1.125.Final'
248+ // Correct the above exclusions, CVE-2025-58057
249+ implementation ' io.netty:netty-codec:4.1.125.Final'
241250
242251 implementation ' io.netty:netty-tcnative-boringssl-static:2.0.61.Final'
243252 }
You can’t perform that action at this time.
0 commit comments