https://nvd.nist.gov/vuln/detail/CVE-2025-58057 indicates this package should be pulling in netty version 4.2.5.Final in the 7.x branches and 4.1.125.Final or later in the 6.8x branch.