Azure / Azure/azure-sdk-for-java
[QUERY] io.netty transient dependencies
Open
Azure.Core
customer-reported
HttpClient
needs-team-attention
question
- Dominant language
- Java
- Stars
- 2.6k
- Forks
- 2.2k
- Avg merge
- 2d 8h
- Merged PRs (30d)
- 178
Description
**Query/Question**
When a new version of com.azure:azure-core-http-netty will be released. There are multiple vulnerabilities even in the latest 1.16.4 version beacuse of usage of io.netty dependencies.
I'm mostly interested in following libraries:
com.azure:azure-storage-blob
com.azure:azure-messaging-servicebus
com.azure:azure-identity
Is there any estimated timeline of upgrading azure-core-http-netty and subsequent libraries
Contributor guide
Assessment
This issue has not been assessed yet.