Upgrade Netty library to address CVE-2026-42582

[anabright]

Describe the bug

awssdk v2.47.0 has a dependency on Netty [4.1.135.Final]

NVD says CVE-2026-42582 affects Netty libraries up to (excluding) version 4.2.13.Final.

Can these dependencies be upgraded, please?

Regression Issue

• Select this option if this issue appears to be a regression.

Expected Behavior

Dependency scan doesn't detect any vulnerabilities.

Current Behavior

Dependency scan currently detects vulnerability CVE-2026-42582 in Netty libraries.

Reproduction Steps

Run a vulnerability scan.

Possible Solution

No response

Additional Information/Context

No response

AWS Java SDK version used

2.47.0

JDK version used

21

Operating System and version

Any

[anabright]

GitHub advisories says it only affects versions >= 4.2.0.Final, <= 4.2.12.Final so I guess it is a false positive by the vulnerability scan. Apologies.

[debora-ito]

Closing.

[github-actions]

This issue is now closed. Comments on closed issues are hard for our team to see.
If you need more assistance, please open a new issue that references this one.