Application Insights versions <= 3.6.2 contain netty-common CVE

[massca01]

For reference, the CVE is version CVE-2024-47535.

Our team utilizes JFrog's Xray scans to find CVEs, and this one is blocking us from building/deploying our code. It seems Application Insights is using a version of netty that has been flagged in the past few days.

I can see it in the build.gradle.kts as below:
io.netty:netty-bom:4.1.114.Final

Is there any plans to fix this soon?

FYI, the fix version is 4.1.115.Final

[stevanusc6]

Me also found the CVE, and need fixing version.