[Snyk] Security upgrade io.projectreactor.netty:reactor-netty-http from 1.0.39 to 1.2.14

[officialmofabs]

Snyk has created this PR to fix 1 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• samples/client/others/java/webclient-useAbstractionForFiles/pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	CRLF Injection SNYK-JAVA-IONETTY-14423947	666	io.projectreactor.netty:reactor-netty-http: 1.0.39 -> 1.2.14 Proof of Concept

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 CRLF Injection

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	maven/​com.squareup.retrofit2/​retrofit@​2.11.0
	maven/​javax.ws.rs/​javax.ws.rs-api@​2.1.1
	maven/​org.glassfish.jersey.media/​jersey-media-json-jackson@​2.35
	maven/​com.fasterxml.jackson.datatype/​jackson-datatype-jsr310@​2.15.2
	maven/​org.apache.httpcomponents.client5/​httpclient5@​5.2.1
	maven/​org.apache.geronimo.config/​geronimo-config-impl@​1.2.3
	maven/​io.smallrye/​smallrye-config@​1.3.5
	maven/​io.smallrye.reactive/​mutiny@​1.2.0
	maven/​org.apache.cxf/​cxf-rt-rs-extension-providers@​3.2.6
	maven/​com.google.api-client/​google-api-client@​2.2.0
	maven/​com.fasterxml.jackson.jaxrs/​jackson-jaxrs-base@​2.15.2
	maven/​org.glassfish.jersey.core/​jersey-client@​2.35
	maven/​org.glassfish.jersey.inject/​jersey-hk2@​2.37
	maven/​org.glassfish.jersey.core/​jersey-common@​2.40
	maven/​io.vertx/​vertx-unit@​3.5.2
	maven/​io.swagger/​swagger-annotations@​1.6.3
	maven/​org.apache.oltu.oauth2/​org.apache.oltu.oauth2.client@​1.0.1
	maven/​io.swagger/​swagger-annotations@​1.5.8
	maven/​com.github.scribejava/​scribejava-apis@​8.3.3
	maven/​com.squareup.retrofit2/​converter-jackson@​2.11.0
	maven/​com.squareup.retrofit2/​converter-scalars@​2.11.0
	maven/​com.squareup.okio/​okio@​3.6.0
	maven/​com.fasterxml.jackson.jaxrs/​jackson-jaxrs-json-provider@​2.15.2
	maven/​org.glassfish.jersey.connectors/​jersey-apache-connector@​2.37
	maven/​io.swagger.core.v3/​swagger-annotations@​2.2.15
	maven/​org.eclipse.microprofile.rest.client/​microprofile-rest-client-api@​2.0
	maven/​io.vertx/​vertx-rx-java@​3.5.2
	maven/​org.glassfish.jersey.ext.microprofile/​jersey-mp-rest-client@​3.0.4
	maven/​com.typesafe.play/​play-ahc-ws_2.12@​2.6.7
	maven/​io.smallrye/​smallrye-rest-client@​1.2.1
	maven/​io.vertx/​vertx-web-client@​3.5.2
	maven/​io.github.threeten-jaxb/​threeten-jaxb-core@​1.2

View full report

[openhands-ai]

Looks like there are a few issues preventing this PR from being merged!

• GitHub Actions are failing:
  • Linux tests
  • Samples Java Client JDK11
  • Windows tests
  • OpenAPI Generator
  • Samples Java Client JDK11
  • .github/workflows/samples-r.yaml

If you'd like me to help, just leave a comment, like

@OpenHands please fix the failing actions on PR #819 at branch `snyk-fix-8226113d503be4b262b019d3a8a86f6a`

Feel free to include any additional details that might help me get this PR into a better state.

_{^{You can manage your notification settings}}