Skip to content

[FR] Vulnerabilities in netty CVE-2025-58056, CVE-2025-58057 #1143

@synaos-bwi

Description

@synaos-bwi

Is your feature request related to a problem? Please describe.
Firebase Admin is using netty version 4.1.124.Final which has the vulnerabilities CVE-2025-58056 and CVE-2025-58057.
The issues are solved with 4.1.126.Final (https://netty.io/news/2025/09/03/4-1-126-Final.html), a 127.Final also exists.

Describe the solution you'd like
I'd like updates to the dependency to at least 4.1.126.Final, so that we can remove our manual version override.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions