Override the netty dependency to fix CVE-2023-44487

Consensys / web3signer

Web3Signer is an open-source signing service capable of signing on multiple platforms (Ethereum1 and 2, Filecoin) using private keys stored in an external vault, or encrypted on a disk.

https://docs.web3signer.consensys.net/

Apache License 2.0

201 stars 78 forks source link

Override the netty dependency to fix CVE-2023-44487 #932

Closed jframe closed 1 year ago

jframe commented 1 year ago

PR Description

Override the netty dependency to fix CVE-2023-44487

Fixed Issue(s)

Documentation

[x] I thought about documentation and added the doc-change-required label to this PR if updates are required.

Changelog

[x] I thought about adding a changelog entry, and added one if I deemed necessary.

Testing

[x] I thought about testing these changes in a realistic/non-local environment.