Mickael Maison created KAFKA-17301:
--------------------------------------
Summary: lz4-java is not maintained anymore
Key: KAFKA-17301
URL: https://issues.apache.org/jira/browse/KAFKA-17301
Project: Kafka
Issue Type: Task
Reporter: Mickael Maison
lz4-java has not made a release since June 2021. It still depends on lz4 1.9.3
which has a critical (however it does not seem exploitable in our case) CVE:
[CVE-2021-3520|https://nvd.nist.gov/vuln/detail/CVE-2021-3520].
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
