Skip to content

Conversation

bidyut90
Copy link

Kafka Client Upgrade

Overview

This project includes an upgrade of the Apache Kafka client library from version 3.5.0 to 3.7.2. The previous version contained known security vulnerabilities, and this update ensures improved security, stability, and compatibility with modern Kafka features.

What Changed

  • Kafka client version updated:
    • Old version: 3.5.0
    • New version: 3.7.2
  • Reason for update: The 3.5.0 version has a known vulnerability. Upgrading eliminates the security risk and aligns with the latest Kafka release.

Updated Configuration

In your pom.xml or dependency configuration file, update the Kafka client version as shown below:

<!-- Before -->
<kafka-clients.version>3.5.0</kafka-clients.version>

<!-- After -->
<kafka-clients.version>3.7.2</kafka-clients.version>

@bidyut90 bidyut90 requested a review from a team as a code owner May 20, 2025 10:54
Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hello there bidyut90! 👋

Thank you and congrats 🎉 for opening your first PR on this project! ✨ 💖

We will try to review it soon!

@Haarolean
Copy link
Contributor

This rep is not maintained (#4255), please see https://github.com/kafbat/kafka-ui instead

@inderanz
Copy link

inderanz commented Jul 8, 2025

Security review needed - check for vulnerabilities

1 similar comment
@inderanz
Copy link

inderanz commented Jul 8, 2025

Security review needed - check for vulnerabilities

@inderanz
Copy link

inderanz commented Jul 8, 2025

Potential issues detected: Found security issue

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants