[GHSA-prj3-ccx8-p6x4] Netty affected by MadeYouReset HTTP/2 DDoS vulnerability

[antonioT90]

Updates

• Affected products
• CVSS v3

Comments
io.grpc:grpc-netty-shaded reported a wrong fixed version

[github]

Hi there @normanmaurer! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[normanmaurer]

This project is a shaded version of netty and so I am not the right contact. It should be someone from the grpc team like @ejona86

[ejona86]

1.75.0 is appropriate (1.175.0 is completely wrong, and it isn't clear to me how it was added.) I'm going to make this comment on #6228, as that seems to be the first of the batch of PRs all making the same change.

[shelbyc]

Closed as a duplicate of #6228