Re: Impact and fix of CVE-2023-34462 and CVE-2023-35116

Hi,

Security threads should not be discussed on user/dev mailing list,
please use dedicated security mailing list:

https://www.apache.org/security/

Regards,

François

On 07/08/2023 06:11, Sahil Sharma D wrote:
> Hi team,
>
> We have found below vulnerabilities in Kafka Version 3.3.1.
>
> * CVE-2023-34462(on 3PP Netty)
> * CVE-2023-35116: (on Jackson databind)
>
>
> Can you please share the mitigation plan and impact of these CVEs.
>
> Regards,
> Sahil
>
--
--
François