Skip to content

netty 4.2.7.Final is flagged by dependabot #1158

@ansf

Description

@ansf

see GHSA-84h7-rjj3-6jx4

there already is an open pull request: #1157

  • is the firebase-admin SDK actually affected by this issues?
    • at the first glance, it looks like netty is only used to connect to the realtime database via websocket
  • are there plans to merge the PR and release a version?

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions