We are trying to address the CVE-2021-43797, netty-all-4.1.68.Final.jar

The wildfly-26.0.0.Final still only ships netty-all-4.1.68.Final by default, so we need to upgrade it to 4.1.72.Final.

The problem we are facing is that the netty-all-4.1.72.Final.jar doesn't come with all the dependencies of its sub-modules out of the box anymore.

We are seeking suggestions/guidance on how to upgrade the Netty to 4.1.72.Final properly, and if possible, can you provide us a sample to include dependencies of sub-modules, adding netty-common for example?

Also, is there a plan to address the CVE in the coming new release of WildFly?

Thanks in advance.