note that this does not affect yajsw.
the CVE refers to the spdy codec, which is implemented in the netty-codec-http lib, which is not included in the yajsw download.
i will keep this issue open and upgrade netty with the next yajsw release.
-- Ron
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
thanks for the feedback.
note that this does not affect yajsw.
the CVE refers to the spdy codec, which is implemented in the netty-codec-http lib, which is not included in the yajsw download.
i will keep this issue open and upgrade netty with the next yajsw release.
-- Ron