Bump reactor-netty-http to 1.2.18 to remediate CVE-2026-41715

Author: manas-ctds

pom.xml

@@ -58,6 +58,7 @@
     <jackson.version>2.21.2</jackson.version>
     <snakeyaml.version>2.0</snakeyaml.version>
     <netty.version>4.1.135.Final</netty.version>
+    <reactor-netty-http.version>1.2.18</reactor-netty-http.version>
   </properties>
   <modules>
     <module>streaming-ai</module>
@@ -251,6 +252,12 @@
         <artifactId>netty-transport-native-unix-common</artifactId>
         <version>${netty.version}</version>
       </dependency>
+      <!-- Override transitive dependency version to fix vulnerability -->
+      <dependency>
+        <groupId>io.projectreactor.netty</groupId>
+        <artifactId>reactor-netty-http</artifactId>
+        <version>${reactor-netty-http.version}</version>
+      </dependency>
     </dependencies>
   </dependencyManagement>
   <build>