Vulnerabilities in transitive dependencies

[GiovanniFaldani]

The latest version of spring-cloud-aws (3.4.0) presents vulnerabilities in some of the dependencies it makes use of:

• CVE-2025-58057 in io.netty:netty-codec:4.1.123.Final , fixed in 4.1.125.Final
• CVE-2025-58056 in io.netty:netty-codec-http:4.1.123.Final, fixed in 4.1.125.Final
• CVE-2025-55163 in io.netty:netty-codec-http2:4.1.123.Final, fixed in 4.1.124.Final
• CVE-2025-48989 in org.apache.tomcat.embed:tomcat-embed-core:10.1.43, fixed in 10.1.44
• CVE-2025-41242 in org.springframework:spring-webmvc:6.2.9, fixed in 6.2.10

I'd like to request these be fixed in the next release.

[GiovanniFaldani]

Solved by updating the org.springframework.boot version to 3.5.6 plugin in the build.gradle.kts of the project.