From 90842f382a30528bfb4ab87a49165e47bccc51f5 Mon Sep 17 00:00:00 2001
From: Avgustin Marinov <Avgustin.Marinov@bosch.com>
Date: Mon, 15 Jun 2026 09:58:43 +0300
Subject: [PATCH] Remove netty override (#3142)

Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
---
 pom.xml | 9 ++-------
 1 file changed, 2 insertions(+), 7 deletions(-)

diff --git a/pom.xml b/pom.xml
index ab166d0c8..1f83c3b72 100644
--- a/pom.xml
+++ b/pom.xml
@@ -42,12 +42,12 @@
 
     <properties>
         <!-- Overrides START - to be reviewed regularly -->
+        <!-- Spring boot version overrides (should be reviewed with every Spring boot upgrade) - START -->
+        <!-- Spring boot version overrides - END -->
         <!-- Override vulnerable commons-fileupload used by feign-form-spring (via spring-cloud-starter-openfeign) -->
         <commons-fileupload.version>1.6.0</commons-fileupload.version>
         <!-- Override commons-lang3 version since 3.17 is vulnerable -->
         <commons-lang.version>3.20.0</commons-lang.version>
-        <!-- Override Netty 4.2.12 due to CVE -->
-        <netty.version>4.2.13.Final</netty.version>
         <!-- Overrides END -->
 
         <revision>0-SNAPSHOT</revision>
@@ -67,11 +67,6 @@
         <spring-cloud-openfeign.version>5.0.1</spring-cloud-openfeign.version>
         <openfeign-hc5.version>13.12</openfeign-hc5.version>
 
-        <!-- Spring boot version overrides (should be reviewed with every Spring boot upgrade) - START -->
-        <!-- Newer versions needed than defined in the Spring boot -->
-
-        <!-- Spring boot version overrides - END -->
-
         <!-- Eclipselink - START -->
         <!--
           Ethlo plugin uses 4.x dependencies - since it only does static weaving - it should be fine - but should eventually upgrade its dependencies.