You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jira@kafka.apache.org by "mimaison (via GitHub)" <gi...@apache.org> on 2026/03/09 13:49:22 UTC

Re: [PR] KAFKA-20168: Upgrade Jetty from 12.0.22 to 12.0.32 to fix CVE-2025-5115 [kafka]

mimaison commented on PR #21452:
URL: https://github.com/apache/kafka/pull/21452#issuecomment-4023929681

   > we should also look for a solution for future releases, as we can expect future CVEs in Jetty.
   
   Here they are:
   - [CVE-2025-11143](https://www.cve.org/CVERecord?id=CVE-2025-11143): https://issues.apache.org/jira/browse/KAFKA-20283
   - [CVE-2026-1605](https://www.cve.org/CVERecord?id=CVE-2026-1605): https://issues.apache.org/jira/browse/KAFKA-20270


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org