chore(deps): update reactor-netty-http (1.1.13, CVE-2023-34062)

* https://spring.io/security/cve-2023-34062
digitalservicebund · Nov 16, 2023 · d5d98c0 · d5d98c0
1 parent a37e1fa
commit d5d98c0
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/build.gradle.kts b/build.gradle.kts
@@ -44,6 +44,9 @@ dependencies {
     // CVE-2022-1471
     implementation(libs.snakeyaml)
 
+    // CVE-2023-34062
+    implementation(libs.reactor.netty.http)
+
     developmentOnly(libs.spring.boot.devtools)
 }
 

diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
@@ -12,6 +12,7 @@ kotlin-reflect = { module = "org.jetbrains.kotlin:kotlin-reflect" }
 kotlin-stdlib-jdk8 = { module = "org.jetbrains.kotlin:kotlin-stdlib-jdk8" }
 kotlinx-coroutines-reactor = { module = "org.jetbrains.kotlinx:kotlinx-coroutines-reactor" }
 reactor-kotlin-extensions = { module = "io.projectreactor.kotlin:reactor-kotlin-extensions" }
+reactor-netty-http = "io.projectreactor.netty:reactor-netty-http:1.1.13"
 reactor-test = { module = "io.projectreactor:reactor-test" }
 snakeyaml = "org.yaml:snakeyaml:2.2"
 spring-boot-devtools = { module = "org.springframework.boot:spring-boot-devtools" }