(cherry picked from commit e6589b3)

Author: sgrampone

gxawsserverless/pom.xml

@@ -60,6 +60,12 @@
             <artifactId>netty-codec-http</artifactId>
             <version>${netty.version}</version>
         </dependency>
+        <!-- overwrite from lambda due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http2</artifactId>
+            <version>${netty.version}</version>
+        </dependency>
 
         <dependency>
             <groupId>com.amazonaws</groupId>

gxazureserverless/pom.xml

@@ -62,6 +62,12 @@
             <artifactId>netty-codec-http</artifactId>
             <version>${netty.version}</version>
         </dependency>
+        <!-- overwrite from azure-messaging-eventgrid due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http2</artifactId>
+            <version>${netty.version}</version>
+        </dependency>
 
         <dependency>
             <groupId>org.mockito</groupId>

gxcloudstorage-awss3-v2/pom.xml

@@ -36,6 +36,12 @@
             <artifactId>netty-codec-http</artifactId>
             <version>${netty.version}</version>
         </dependency>
+        <!-- overwrite from s3 due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http2</artifactId>
+            <version>${netty.version}</version>
+        </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-1.2-api</artifactId>

gxcloudstorage-azureblob-latest/pom.xml

@@ -35,6 +35,12 @@
             <groupId>io.netty</groupId>
             <artifactId>netty-codec-http</artifactId>
             <version>${netty.version}</version>
+        </dependency>
+        <!-- overwrite from sqs due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http2</artifactId>
+            <version>${netty.version}</version>
         </dependency>
 		<dependency>
 			<groupId>com.azure</groupId>

gxcosmosdb/pom.xml

@@ -46,6 +46,12 @@
             <artifactId>netty-codec-http</artifactId>
             <version>${netty.version}</version>
         </dependency>
+        <!-- overwrite from azure-core-http-netty due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http2</artifactId>
+            <version>${netty.version}</version>
+        </dependency>
 
         <dependency>
 			<groupId>${project.groupId}</groupId>

gxdynamodb/pom.xml

@@ -36,6 +36,12 @@
             <artifactId>netty-codec-http</artifactId>
             <version>${netty.version}</version>
         </dependency>
+        <!-- overwrite from dynamodb due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http2</artifactId>
+            <version>${netty.version}</version>
+        </dependency>
         <dependency>
 			<groupId>${project.groupId}</groupId>
 			<artifactId>gxclassR</artifactId>

gxqueue-awssqs/pom.xml

@@ -34,6 +34,12 @@
             <artifactId>netty-codec-http</artifactId>
             <version>${netty.version}</version>
         </dependency>
+        <!-- overwrite from sqs due to transitive CVEs -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-codec-http2</artifactId>
+            <version>${netty.version}</version>
+        </dependency>
         <dependency>
             <groupId>software.amazon.awssdk</groupId>
             <artifactId>apache-client</artifactId>

pom.xml

@@ -39,7 +39,7 @@
         <xmlsec.version>3.0.3</xmlsec.version>
         <jose.version>10.4</jose.version>
         <commons.lang3.version>3.18.0</commons.lang3.version>
-        <netty.version>4.1.129.Final</netty.version>
+        <netty.version>4.1.132.Final</netty.version>
 	</properties>
 
 	<organization>