CVE-2022-41915 discussion

[YVoitiuk]

Hi everyone! I was investigating the vulnerability CVE-2022-41915, which according to the sources of NVD refers to io.netty:netty, but from the sources of the GitHub Advisory Database this vulnerability refers only to io.netty:netty-codec-http. I asked the NVD to update this information, but I received a reply that the netty-codec-http package does not seem to follow a separate versioning scheme from Netty either. Can anyone please corroborate that this package is independent from Netty ?