From 394684137d8b9d2f2e4b985f52a41578138b3340 Mon Sep 17 00:00:00 2001
From: Benny D <78334662+benny-dreamly@users.noreply.github.com>
Date: Sun, 25 Oct 2026 16:05:40 -0600
Subject: [PATCH] Bump org.apache.httpcomponents.core5:httpcore5 from 5.4.2 to
 5.4.3

Patches CVE-2026-54399 (HTTP/1 header parsing memory-exhaustion denial of service, fixed in 5.4.3).
---
 gradle/libs.versions.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 0028d8f..f7572ff 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -6,7 +6,7 @@ junit-jupiter = "5.14.4"
 java-websocket = "1.6.0"
 gson = "2.14.0"
 httpclient = "5.6.4"
-httpcore = "5.4.2"
+httpcore = "5.4.3"
 
 [libraries]
 junit-jupiter = { module = "org.junit.jupiter:junit-jupiter", version.ref = "junit-jupiter" }