chore(deps): update reactor-netty-http (1.1.13, CVE-2023-34062)

* https://spring.io/security/cve-2023-34062
digitalservicebund · Nov 16, 2023 · 5dd0d96 · 5dd0d96
1 parent c53a38a
commit 5dd0d96
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/build.gradle.kts b/build.gradle.kts
@@ -41,6 +41,9 @@ dependencies {
     // CVE-2022-1471
     implementation(libs.snakeyaml)
 
+    // CVE-2023-34062
+    implementation(libs.reactor.netty.http)
+
     compileOnly(libs.lombok)
 
     developmentOnly(libs.spring.boot.devtools)

diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
@@ -7,6 +7,7 @@ spring-boot = "3.1.5"
 archunit-junit5 = "com.tngtech.archunit:archunit-junit5:1.2.0"
 lombok = { module = "org.projectlombok:lombok" }
 mockito-junit-jupiter = "org.mockito:mockito-junit-jupiter:5.7.0"
+reactor-netty-http = "io.projectreactor.netty:reactor-netty-http:1.1.13"
 reactor-test = { module = "io.projectreactor:reactor-test" }
 snakeyaml = "org.yaml:snakeyaml:2.2"
 spring-boot-devtools = { module = "org.springframework.boot:spring-boot-devtools" }