[TINKERPOP-2983] Upgrade Netty for Security Reasons

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.7.0
• Fix Version/s: 3.5.8, 3.6.6, 3.7.1
• Component/s: driver, server
• Labels: security
• Flags: Important
• External issue URL: https://nvd.nist.gov/vuln/detail/CVE-2023-34462
• Assignee: Cole Greer
• Reporter: Luca Garulli
• Created: 15/Aug/23 18:05
• Updated: 15/Aug/23 21:53
• Resolved: 15/Aug/23 21:53

Description

Gremlin 3.7.0 (and previous) depends on Netty 4.1.86 that has a severe security issue reported on https://nvd.nist.gov/vuln/detail/CVE-2023-34462.

 

The latest Netty version right now if 4.1.96.Final.