[Snyk] Fix for 17 vulnerabilities

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- pom.xml

Vulnerabilities that will be fixed

With an upgrade:

Priority Score (*)	Issue	Upgrade	Breaking Change	Exploit Maturity
654/1000 Why? Has a fix available, CVSS 8.8	Integer Overflow SNYK-JAVA-COMGOOGLEPROTOBUF-173761	`com.google.protobuf:protobuf-java:` `2.5.0 -> 3.16.1`	Yes	No Known Exploit
589/1000 Why? Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JAVA-COMGOOGLEPROTOBUF-2331703	`com.google.protobuf:protobuf-java:` `2.5.0 -> 3.16.1`	Yes	No Known Exploit
539/1000 Why? Has a fix available, CVSS 6.5	Denial of Service (DoS) SNYK-JAVA-IONETTY-1020439		No	No Known Exploit
524/1000 Why? Has a fix available, CVSS 6.2	Information Disclosure SNYK-JAVA-IONETTY-1070799		No	No Known Exploit
524/1000 Why? Has a fix available, CVSS 6.2	Information Disclosure SNYK-JAVA-IONETTY-1082234		No	No Known Exploit
524/1000 Why? Has a fix available, CVSS 6.2	Information Disclosure SNYK-JAVA-IONETTY-1082235		No	No Known Exploit
524/1000 Why? Has a fix available, CVSS 6.2	Information Disclosure SNYK-JAVA-IONETTY-1082236		No	No Known Exploit
724/1000 Why? Mature exploit, Has a fix available, CVSS 5.9	HTTP Request Smuggling SNYK-JAVA-IONETTY-1317097		No	Mature
589/1000 Why? Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JAVA-IONETTY-1584063		No	No Known Exploit
589/1000 Why? Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JAVA-IONETTY-1584064		No	No Known Exploit
539/1000 Why? Has a fix available, CVSS 6.5	HTTP Request Smuggling SNYK-JAVA-IONETTY-2314893		No	No Known Exploit
589/1000 Why? Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JAVA-IONETTY-30433		No	No Known Exploit
539/1000 Why? Has a fix available, CVSS 6.5	Insecure Defaults SNYK-JAVA-IONETTY-31515		No	No Known Exploit
646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	HTTP Request Smuggling SNYK-JAVA-IONETTY-469234		No	Proof of Concept
696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	HTTP Request Smuggling SNYK-JAVA-IONETTY-543490		No	Proof of Concept
696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	HTTP Request Smuggling SNYK-JAVA-IONETTY-543669		No	Proof of Concept
589/1000 Why? Has a fix available, CVSS 7.5	Information Exposure SNYK-JAVA-IONETTY-575112		No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Vulnerabilities that could not be fixed

Upgrade:
- Could not upgrade io.netty:netty-buffer@4.1.0.Beta1 to io.netty:netty-buffer@4.1.59.Final; Reason failed to apply upgrade ; Location: file://all/pom.xml
- Could not upgrade io.netty:netty-codec@4.1.0.Beta1 to io.netty:netty-codec@4.1.68.Final; Reason failed to apply upgrade ; Location: file://all/pom.xml
- Could not upgrade io.netty:netty-codec-dns@4.1.0.Beta1 to io.netty:netty-codec-dns@4.1.68.Final; Reason failed to apply upgrade ; Location: file://all/pom.xml
- Could not upgrade io.netty:netty-codec-haproxy@4.1.0.Beta1 to io.netty:netty-codec-haproxy@4.1.68.Final; Reason failed to apply upgrade ; Location: file://all/pom.xml
- Could not upgrade io.netty:netty-codec-http@4.1.0.Beta1 to io.netty:netty-codec-http@4.1.71.Final; Reason failed to apply upgrade ; Location: file://all/pom.xml
- Could not upgrade io.netty:netty-codec-memcache@4.1.0.Beta1 to io.netty:netty-codec-memcache@4.1.68.Final; Reason failed to apply upgrade ; Location: file://all/pom.xml
- Could not upgrade io.netty:netty-codec-mqtt@4.1.0.Beta1 to io.netty:netty-codec-mqtt@4.1.68.Final; Reason failed to apply upgrade ; Location: file://all/pom.xml
- Could not upgrade io.netty:netty-codec-socks@4.1.0.Beta1 to io.netty:netty-codec-socks@4.1.68.Final; Reason failed to apply upgrade ; Location: file://all/pom.xml
- Could not upgrade io.netty:netty-codec-stomp@4.1.0.Beta1 to io.netty:netty-codec-stomp@4.1.68.Final; Reason failed to apply upgrade ; Location: file://all/pom.xml
- Could not upgrade io.netty:netty-common@4.1.0.Beta1 to io.netty:netty-common@4.1.59.Final; Reason failed to apply upgrade ; Location: file://all/pom.xml
- Could not upgrade io.netty:netty-example@4.1.0.Beta1 to io.netty:netty-example@4.1.71.Final; Reason failed to apply upgrade ; Location: file://all/pom.xml
- Could not upgrade io.netty:netty-handler@4.1.0.Beta1 to io.netty:netty-handler@4.1.68.Final; Reason failed to apply upgrade ; Location: file://all/pom.xml
- Could not upgrade io.netty:netty-transport@4.1.0.Beta1 to io.netty:netty-transport@4.1.59.Final; Reason failed to apply upgrade ; Location: file://all/pom.xml
- Could not upgrade io.netty:netty-transport-rxtx@4.1.0.Beta1 to io.netty:netty-transport-rxtx@4.1.59.Final; Reason failed to apply upgrade ; Location: file://all/pom.xml
- Could not upgrade io.netty:netty-transport-sctp@4.1.0.Beta1 to io.netty:netty-transport-sctp@4.1.68.Final; Reason failed to apply upgrade ; Location: file://all/pom.xml
- Could not upgrade io.netty:netty-transport-udt@4.1.0.Beta1 to io.netty:netty-transport-udt@4.1.59.Final; Reason failed to apply upgrade ; Location: file://all/pom.xml

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

ChoeMinji / netty-4.1.0

[Snyk] Fix for 17 vulnerabilities #46

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:

Vulnerabilities that could not be fixed