CGA-5hr5-g6v2-4w72

netty is a transitive dependency of this project, and is affected by this CVE. Remediating this CVE would require upgrading a chain of dependencies: (quarkus <-- quarkus-http <-- netty). The latest version of quarkus-http (at the time of writing), still depends on an older, affected version of netty. Regardless, attempting to upgrade netty results in build failures. Waiting for upstream to address in a future release.

• https://github.com/quarkusio/quarkus/blob/a98a3f91fc06c959672b67ece75516bb59b994cd/bom/application/pom.xml#L38
• https://github.com/Apicurio/apicurio-registry/blob/779f0994a1de5ebd48f617f476f3e3b7c5a36e48/pom.xml#L147
• https://github.com/quarkusio/quarkus-http/blob/314574122c3616e96d2e76edb15da2692036edc8/pom.xml#L67