Release plan required for version 3.5.1

Hi Team,

There is an vulnerability on snappy-java-1.1.8.4.jar, are we impacted due to this if we are using only client jar and kafka server.

Below are the vulnerabilities that still open and we unable to find any detail of these CVEs on jira. In which version these CVEs are planned to be resolved?
CVE-2022-42003
CVE-2022-42004
CVE-2023-34454
CVE-2023-34453
CVE-2023-35116

Kindly share the release plan for version 3.5.1.

Regards,
Sahil