Why temporal java sdk is using an older version of grpc-netty-shaded

Community Support
1

The latest version of temporal SDK is still using an older version of grpc-netty-shaded which has vulnerabilities. why don’t upgrade to the latest version of grpc-netty-shaded?

https://mvnrepository.com/artifact/io.grpc/grpc-netty-shaded

1 Like
2

Please see Dependency Security issue CVE-2025-55163 - #2 by Quinn_Klassen