diff --git a/build.gradle b/build.gradle index 946ef48..4cae60b 100644 --- a/build.gradle +++ b/build.gradle @@ -104,6 +104,10 @@ configurations.all { // newer version. v1.15.0, used by Minecraft 1.21.3, is vulnerable to // CVE-2024-35255. force "com.microsoft.azure:msal4j:1.17.2" + // Override vulnerable netty-common dependency until Minecraft updates + // to a newer version. v4.1.97.Final, used by Minecraft 1.21 - 1.21.3, + // is vulnerable to CVE-2024-47535. + force "io.netty:netty-common:4.1.115.Final" // Fixes a weird issue in NeoForge 21.3 where it tries to load both // ASM 9.7 and ASM 9.5 at the same time.