Closed
Description
firebase-admin-java
has a dependency to io.netty:netty-handler:4.1.116.Final
.
This version of netty-handler is flagged by dependabot, see GHSA-4g8c-wm8x-jfhw
For the fixed version 4.1.118 there is already a pull request: #1074
This might not be a critical issue to firebase-admin-java, but it would be nice if you could publish a release after merging the PR.
Activity
google-oss-bot commentedon Feb 20, 2025
I couldn't figure out how to label this issue, so I've labeled it for a human to triage. Hang tight.
jonathanedey commentedon May 29, 2025
Thanks for your patience, this is now resolved in v9.5.0