Merge branch 'master' into 1.21.3-neoforge

Wurst-Imperium · Nov 14, 2024 · f6a38c9 · f6a38c9
2 parents cfea1fe + 9db84cb
commit f6a38c9
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -104,6 +104,10 @@ configurations.all {
 		// newer version. v1.15.0, used by Minecraft 1.21.3, is vulnerable to
 		// CVE-2024-35255.
 		force "com.microsoft.azure:msal4j:1.17.2"
+		// Override vulnerable netty-common dependency until Minecraft updates
+		// to a newer version. v4.1.97.Final, used by Minecraft 1.21 - 1.21.3,
+		// is vulnerable to CVE-2024-47535.
+		force "io.netty:netty-common:4.1.115.Final"
 
 		// Fixes a weird issue in NeoForge 21.3 where it tries to load both
 		// ASM 9.7 and ASM 9.5 at the same time.