From b1209bc0041bd9d0196f0f3762dd1d88d79ad87d Mon Sep 17 00:00:00 2001
From: nithy1603 <67348894+nithy1603@users.noreply.github.com>
Date: Wed, 8 Oct 2025 12:32:58 -0700
Subject: [PATCH 1/2] Fix CVE-2025-55163 & GHSA-xpw8-rcwv-8f8p

Vulnerabilities

===============

  CVE                    Severity    CVSS    CVE Introduced From Package    Package Version    Fixed In Version    Grace period ends on

  ---                    --------    ----    ---------------------------    ---------------    ----------------    --------------------

  CVE-2025-55163         high        8.2     io.netty:netty-codec-http2     4.1.86.Final       4.1.124             NA

  GHSA-xpw8-rcwv-8f8p    high        7.5     io.netty:netty-codec-http2     4.1.86.Final       4.1.100             NA
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 05d663ac9..898559336 100644
--- a/pom.xml
+++ b/pom.xml
@@ -57,7 +57,7 @@
         <slf4j.version>2.0.6</slf4j.version>
         <jackson.version>2.14.2</jackson.version>
         <velocity.version>2.3</velocity.version>
-        <netty.version>4.1.89.Final</netty.version>
+        <netty.version>4.1.124</netty.version>
         <httpcomponents.version>4.4.1</httpcomponents.version>
         <bouncycastle.version>1.72</bouncycastle.version>
         <!-- highest spring version is 5.3 due to Java 1.8 version -->

From b1022fa7bc8327b3b83c2221f5b822a6c5c4ab7f Mon Sep 17 00:00:00 2001
From: nithy1603 <67348894+nithy1603@users.noreply.github.com>
Date: Wed, 8 Oct 2025 13:11:51 -0700
Subject: [PATCH 2/2] Update pom.xml

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 898559336..97e342151 100644
--- a/pom.xml
+++ b/pom.xml
@@ -563,7 +563,7 @@
                 <!-- Conflicting versions in swagger-parser -->
                 <groupId>org.yaml</groupId>
                 <artifactId>snakeyaml</artifactId>
-                <version>1.33</version>
+                <version>2.0</version>
             </dependency>
         </dependencies>
     </dependencyManagement>